CVE-2026-13327

Devolutions Server versions 2026.2.16 and earlier are vulnerable due to improper certificate validation on LDAPS connections to Active Directory, enabling an attacker with network access to intercept privileged directory service credentials by presenting a spoofed domain controller certificate. Organizations using these versions should prioritize remediation to mitigate the risk of credential theft and potential unauthorized access to sensitive directory services.