CVE-2026-78417
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 24, 2026
Vendor
unknown
Description
Insufficient verification of data authenticity in the IronVNC client in Devolutions Remote Desktop Manager 2026.2.17.0 and earlier, 2026.1.24.0 and earlier, allows an on-path attacker to intercept and tamper with VNC sessions via automatic acceptance of the server's RSA key during RSA-AES authentication.