Improper Certificate Validation in Devolutions Server by Devolutions

CVE-2025-11619

What is CVE-2025-11619?

A vulnerability in Devolutions Server versions 2025.3.2 and earlier stems from improper certificate validation during connections to gateways. This flaw can enable attackers in a Man-in-the-Middle (MitM) position to intercept sensitive traffic, potentially exposing confidential information transmitted between clients and servers. It is critical for users of affected versions to review their security practices to mitigate the risks associated with this vulnerability.

References