Skip to content
OpenAdvisories
High · 8.3 CVE-2026-4396 EUVD-2026-12950

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-t…

Published Mar 18, 2026 · Updated Mar 18, 2026 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Hub Reporting Service

Description

Improper certificate validation in Devolutions Hub Reporting Service
2025.3.1.1 and earlier allows a network attacker to perform a
man-in-the-middle attack via disabled TLS certificate verification.

Affected products

VendorProductAffectedFixed
Devolutions Hub Reporting Service ≤ 2025.3.1.1 —

References