CVE-2026-84850

Devolutions Server versions 2026.2.16 and earlier have a vulnerability in their shared HTTP client that improperly validates certificates, enabling attackers positioned on the network to intercept and manipulate outbound TLS connections using spoofed or self-signed certificates. Organizations utilizing Devolutions Server should prioritize addressing this issue to mitigate the risk of data interception and integrity compromise. Immediate action is recommended for those relying on synchronization and integration features within the affected software.