CVE-2026-3277

The vulnerability CVE-2026-3277 affects PowerShell Universal prior to version 2026.1.3, where the OpenID Connect (OIDC) client secret is stored in cleartext in the .universal/authentication.ps1 script. An attacker with read access to that file can obtain the OIDC client credentials, leading to po...

CVE-2026-0618

A Cross-site Scripting (XSS) vulnerability exists in Devolutions PowerShell Universal due to improper input neutralization during web page generation. This flaw allows an attacker to inject malicious scripts into web pages viewed by other users, potentially leading to malicious code execution wit...