Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-8497

TLS Certificate Validation Failure Enables Man‑in‑the‑Middle Attacks

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Apple Devolutions Google
Products
Iphone Os Macos Password Manager and 1 more