Threats tagged 'ghsa-4xr3-645c-fchw'

CVE-2026-19768 is a code injection vulnerability in the settings feature of Devolutions PowerShell Universal version 2026.2.3 and earlier. It allows an authenticated user with settings management permission to execute arbitrary PowerShell code by injecting crafted values into the settings configuration file. This vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity without requiring user interaction.