CVE-2026-4064

PowerShell Universal contains a vulnerability (CVE-2026-4064) where missing authorization checks on multiple gRPC service endpoints allow an authenticated user with any valid token to bypass role-based access controls. This can enable reading sensitive data, creating or deleting resources, and di...

CVE-2022-45183

Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6...