PU
Product
PowerShell Universal
by Devolutions · last CVE Oct 27, 2026
13
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 8Low 0
Watch

Add PowerShell Universal to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-16801
8.8
1%
Jul 24
Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with…
Affected: before 2026.2.3
CVE-2026-16800
8.8
1%
Jul 24
Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with…
Affected: before 2026.2.3
CVE-2026-4064
8.3
0%
Mar 17
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based…
Affected: 2026.1.0 before 2026.1.4
CVE-2026-19768
8.1
0%
Aug 14
Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with…
Affected: before 2026.2.4
Showing 4