127 matches found
CVE-2026-116627
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
EUVD-2026-110829
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
CVE-2026-116627
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
CVE-2026-116627
Devolutions PowerShell Universal versions 2026.3.0 and earlier are vulnerable to a Cross-Site Scripting (XSS) flaw in the notifications feature . The root cause is the improper neutralization of input during web page generation, which allows an authenticated user with notification creation permis...
PT-2026-126400
Improper neutralization of input during web page generation 'Cross-site Scripting' in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another use...
Devolutions PowerShell Universal cross-site scripting vulnerability
Devolutions PowerShell Universal versions 2026.3.0 and earlier contain a cross-site scripting vulnerability. This flaw arises because the notification functionality processes input during web page generation in an improper manner. As a result, authenticated users with notification creation...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
EUVD-2026-79941
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
CVE-2026-92237
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
CVE-2026-92237
The Devolutions PowerShell Universal software, versions 2026.2.5 and earlier , is vulnerable to the insertion of sensitive information into log files via the slow query logging feature . On instances backed by Microsoft SQL Server , this flaw allows an authenticated user with log read permissions...
CVE-2026-92237: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
PT-2026-93168
Name of the Vulnerable Software and Affected Versions Devolutions PowerShell Universal versions prior to 2026.2.6 Description The slow query logging feature allows the insertion of sensitive information into log files. An authenticated user with log read permissions can obtain application tokens,...
CVE-2026-19768
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19768
Devolutions PowerShell Universal versions 2026.2.3 and earlier are vulnerable to a Code Injection flaw in the settings feature. An authenticated user with settings management permissions can execute arbitrary PowerShell code by providing a crafted setting value that is not properly escaped when w...
EUVD-2026-58661
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19768
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19768
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19768
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19768: Improper Control of Generation of Code
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...