Advisories · Technology

Devolutions PowerShell Universal.

Every CVE that names Devolutions PowerShell Universal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116627 CVE record

CVSS 8.7 High

Cross-site scripting in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2026
CVE-2026-92237 CVE record

CVSS 6.5 Medium

Sensitive information in log files in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Information disclosure
Not analysed yet 15 Sept 2026
CVE-2026-19768 CVE record

CVSS 8.1 High

Code injection in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Code injection
Not analysed yet 14 Aug 2026
CVE-2026-16802 CVE record

CVSS 6.5 Medium

Cleartext storage of sensitive information in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Information disclosure
Not analysed yet 24 Jul 2026
CVE-2026-16801 CVE record

CVSS 8.8 High

Code injection in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Code injection
Not analysed yet 24 Jul 2026
CVE-2026-16800 CVE record

CVSS 8.8 High

Code injection in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Code injection
Not analysed yet 24 Jul 2026
CVE-2026-16799 CVE record

CVSS 5.0 Medium

Missing authorization in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Broken access control
Not analysed yet 24 Jul 2026
CVE-2026-16798 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Information disclosure
Not analysed yet 24 Jul 2026
CVE-2026-13437 CVE record

CVSS 6.5 Medium

Information disclosure in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Information disclosure
Not analysed yet 29 Jun 2026
CVE-2026-8694 CVE record

CVSS 5.3 Medium

Improper access control on the API documentation endpoint in PowerShell Universal
- Devolutions PowerShell Universal
- Authentication bypass
Not analysed yet 12 Jun 2026
CVE-2026-3563 CVE record

CVSS 5.5 Medium

Devolutions PowerShell Universal: Improper input validation in the apps and endpoints configuration in PowerShell Universal…
- Devolutions PowerShell Universal
- CWE-1289
Not analysed yet 17 Mar 2026
CVE-2026-4064 CVE record

CVSS 8.3 High

Missing authorization in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Broken access control
Not analysed yet 17 Mar 2026
CVE-2026-3277 CVE record

CVSS 5.5 Medium

Cleartext storage of sensitive information in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Information disclosure
Not analysed yet 27 Feb 2026
CVE-2026-0618 CVE record

CVSS 6.1 Medium

Cross-site scripting in Devolutions PowerShell Universal
- Devolutions PowerShell Universal
- Cross-site scripting (XSS)
Not analysed yet 7 Jan 2026