ZeroDay Findings
Sign inSign up

Findings

CVE-2026-4396

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disable…

Published Mar 18, 2026 · updated Jun 17, 2026 · devolutions hub reporting service

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 18, 2026 · NIST NVD

    Detected

    Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

Affected

  • cpe devolutions/hub reporting serviceversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-4396

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-4396

    Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

    nvd.nist.gov

References