THREAT OPS › Threat News › [NVD] CVE-2026-8497 (HIGH 7.4) — Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
[NVD] CVE-2026-8497 (HIGH 7.4) — Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
CVE-2026-8497 CVSS: 7.4 HIGH Published: 2026-07-29T18:16:58.787
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
Indicators of compromise
- CVE-2026-8497cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8497