CVE-2026-4396Disclosure(devolutions / hub_reporting_service)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification.

devolutions CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://devolutions.net/security/advisories/DEVO-2026-0009/

Weakness type (CWE)

CWE-295

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

hub_reporting_service

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

devolutions

Products

hub_reporting_service

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

The Hacker Wire@TheHackerWire205d
General
🟠 CVE-2026-4396 - High Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verif... https://www.thehackerwire.com/vulnerability/CVE-2026-4396/ https://t.co/yeXegKnc3n
Post summary
A high‑severity CVE‑2026‑4396 involving improper TLS certificate validation has been disclosed, highlighting a potential man‑in‑the‑middle attack vector, with no current exploitation or patch information provided.
0001045
138 followersView on X
CVE@CVEnew205d
Disclosure
CVE-2026-4396 Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disabl… https://www.cve.org/CVERecord?id=CVE-2026-4396
Post summary
The CVE-2026-4396 vulnerability involves improper certificate validation in Devolutions Hub Reporting Service versions prior to 2025.3.1.1, enabling network attackers to perform a man‑in‑the‑middle attack.
0000060
56.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	devolutions	hub_reporting_service	-	-	-

Explore more

Back to dashboard devolutions CVEs hub_reporting_service vulnerabilities