High · 7.4 CVE-2026-8497 EUVD-2026-50422GHSA-8v79-5vwg-m22q

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on And…

Published Jul 29, 2026 · Updated Jul 29, 2026 · Assigned by DEVOLUTIONS

Vendor: Devolutions Product: Password Manager

Description

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.

Affected products

Vendor	Product	Affected	Fixed
Devolutions	Password Manager	< 2026.2.2	2026.2.2

References

https://devolutions.net/security/advisories/DEVO-2026-0027/