Skip to content
OpenAdvisories
High · 8.1 CVE-2026-4434 EUVD-2026-13688

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack vi…

Published Mar 20, 2026 · Updated Mar 23, 2026 · Assigned by DEVOLUTIONS

Description

Improper certificate validation in the PAM propagation WinRM connections
allows a network attacker to perform a man-in-the-middle attack via
disabled TLS certificate verification.

Affected products

VendorProductAffectedFixed
Devolutions Server < 2026.1 2026.1

References