CVE-2026-78417

The IronVNC client within Devolutions Remote Desktop Manager is vulnerable to an insufficient verification of data authenticity (CVE-2026-78417). This flaw allows an on-path attacker to intercept and tamper with VNC sessions because the client automatically accepts the server's RSA key during RSA...