CVE-2026-78417: CWE-345 Insufficient Verification of Data Authenticity in Devolutions Remote Desktop Manager
Description
CVE-2026-78417 is a medium severity vulnerability in Devolutions Remote Desktop Manager affecting versions prior to 2026.2.18 and 2026.1.25. It involves insufficient verification of data authenticity in the IronVNC client, allowing an on-path attacker to intercept and tamper with VNC sessions by exploiting automatic acceptance of the server's RSA key during RSA-AES authentication.
CVSS v3.1
Score 4.3medium
Affected software
Devolutions
Remote Desktop Manager
Devolutions
Remote Desktop Manager
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-345) in Devolutions Remote Desktop Manager's IronVNC client versions before 2026.2.18 and 2026.1.25 allows an attacker positioned on the network path to intercept and modify VNC sessions. The issue arises because the client automatically accepts the server's RSA key during RSA-AES authentication without sufficient verification of its authenticity, enabling tampering with session data.
Potential Impact
An on-path attacker can intercept and tamper with VNC sessions, potentially altering session data. However, the vulnerability does not allow confidentiality compromise or denial of service, as indicated by the CVSS vector (no confidentiality or availability impact, low integrity impact).
Mitigation Recommendations
No explicit patch or vendor advisory is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider avoiding use of affected versions or employ additional network protections to prevent on-path attacks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- DEVOLUTIONS
- Date Reserved
- 2026-08-24T15:10:53.447Z
- State
- PUBLISHED
Threat ID: 6a8c8f72acd9273b49f6e26a
Added to database: 08/24/2026, 18:37:38 UTC
Last enriched: 09/10/2026, 21:18:19 UTC
Last updated: 10/08/2026, 18:48:48 UTC
Views: 90
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.