Threat Intelligence Database

CVE-2026-19768 is a code injection vulnerability in the settings feature of Devolutions PowerShell Universal version 2026.2.3 and earlier. It allows an authenticated user with settings management permission to execute arbitrary PowerShell code by injecting crafted values into the settings configuration file. This vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity without requiring user interaction.

Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 allows an authenticated user with AI Agent read access to obtain reusable, potentially higher-privileged authentication tokens via App Tokens serialized in plaintext in job API responses.

Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.

MediumVulnerabilityUnited StatesCanadaUnited Kingdom+9#cve#cve-2026-3563#cwe-1289

Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based access controls and perform privileged operations — including reading sensitive data, creating or deleting resources, and disrupting service operations — via crafted gRPC requests.

HighVulnerabilityUnited StatesCanadaUnited Kingdom+9#cve#cve-2026-4064#cwe-862

Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information.

HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2024-50616