Vulnerability Details CVE-2026-8497
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 0.3%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2026-8497
-
cpe:2.3:a:devolutions:password_manager:2022.3.0.11
-
cpe:2.3:a:devolutions:password_manager:2022.3.1.0
-
cpe:2.3:a:devolutions:password_manager:2022.3.2.4
-
cpe:2.3:a:devolutions:password_manager:2022.4.0.6
-
cpe:2.3:a:devolutions:password_manager:2022.4.1.4
-
cpe:2.3:a:devolutions:password_manager:2023.1.0.4
-
cpe:2.3:a:devolutions:password_manager:2023.1.0.5
-
cpe:2.3:a:devolutions:password_manager:2023.1.1.4
-
cpe:2.3:a:devolutions:password_manager:2023.1.2.8
-
cpe:2.3:a:devolutions:password_manager:2023.1.2.9
-
cpe:2.3:a:devolutions:password_manager:2023.1.3.1
-
cpe:2.3:a:devolutions:password_manager:2023.1.3.2
-
cpe:2.3:a:devolutions:password_manager:2023.1.4.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.0.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.1.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.2.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.3.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.4.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.5.0
-
cpe:2.3:a:devolutions:password_manager:2023.2.6.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.0.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.1.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.2.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.3.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.4.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.5.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.6.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.7.0
-
cpe:2.3:a:devolutions:password_manager:2023.3.8.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.0.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.1.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.2.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.3.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.4.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.5.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.6.0
-
cpe:2.3:a:devolutions:password_manager:2024.1.7.0
-
cpe:2.3:a:devolutions:password_manager:2024.2.0.0
-
cpe:2.3:a:devolutions:password_manager:2024.2.1.0
-
cpe:2.3:a:devolutions:password_manager:2024.2.2.0
-
cpe:2.3:a:devolutions:password_manager:2024.2.3.0
-
cpe:2.3:a:devolutions:password_manager:2024.2.4.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.0.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.1.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.2.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.3.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.4.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.5.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.6.0
-
cpe:2.3:a:devolutions:password_manager:2024.3.7.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.0.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.1.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.2.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.3.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.4.0
-
cpe:2.3:a:devolutions:password_manager:2025.1.5.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.0.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.1.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.2.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.3.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.4.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.5.0
-
cpe:2.3:a:devolutions:password_manager:2025.2.6.0
-
cpe:2.3:a:devolutions:password_manager:2025.3.0.0
-
cpe:2.3:a:devolutions:password_manager:2025.3.1.0
-
cpe:2.3:a:devolutions:password_manager:2025.3.2.0
-
cpe:2.3:a:devolutions:password_manager:2025.3.3.0
-
cpe:2.3:a:devolutions:password_manager:2025.3.4.0
-
cpe:2.3:a:devolutions:password_manager:2026.1.0.0
-
cpe:2.3:a:devolutions:password_manager:2026.1.1.0
-
cpe:2.3:a:devolutions:password_manager:2026.1.2.0
-
cpe:2.3:a:devolutions:password_manager:2026.1.3.0
-
cpe:2.3:a:devolutions:password_manager:2026.1.4.0
-
cpe:2.3:a:devolutions:password_manager:2026.2.0.0
-
cpe:2.3:a:devolutions:password_manager:2026.2.1.0
-
cpe:2.3:o:apple:iphone_os:-
-
-
cpe:2.3:o:google:android:-