CVE-2026-4396:
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.
Score
A numerical rating that indicates how dangerous this vulnerability is.
8.3HighA numerical rating that indicates how dangerous this vulnerability is.
- Published Date:Mar 18, 2026
- CISA KEV Date:*No Data*
- Industries Affected:20
Exploitability
- Score:2.8
- Attack Vector:ADJACENT_NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:5.5
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:LOW
Description Preview
Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
Low
