← Database

CVE-2026-4434

HIGH CVSS: 8.1 Published: 2026-03-20 Modified: 2026-06-17

Description

Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

Affected Platforms

Devolutions Devolutions Server

Weakness Type

CWE-295

References