Security & compliance
Upholding the highest standards to protect your data and ensure trust.
DEVO-2026-0027
Devolutions Password Manager is affected by an improper certificate validation vulnerability.
Affected Products
Devolutions Password Manager
2026.2.1.0 and earlier
Change Log
Initial publication - 2026-07-29
Improper certificate validation on Devolutions Server connections
7.2 High - CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:H/SA:N
Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earlier on Android, iOS, and macOS allows an adjacent-network attacker to intercept and modify sensitive information via a forged TLS certificate.
CVE(s)
CVE-2026-8497
Remediation and Workarounds
Upgrade to Devolutions Password Manager 2026.2.2.0 or higher.