IR
Vendor
Ironmansoftware
1 product with CVEs on record
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-8694
PU
Powershell Universal
Ironmansoftware
5.3
0%
Jun 12Improper access control on the API documentation endpoint in PowerShell Universal
CVE-2026-3563
PU
Powershell Universal
Ironmansoftware
5.5
0%
Mar 17Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or…
CVE-2026-4064
PU
Powershell Universal
Ironmansoftware
8.3
0%
Mar 17Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based…
CVE-2026-3277
PU
Powershell Universal
Ironmansoftware
6.5
0%
Feb 27The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1…
CVE-2026-0618
PU
Powershell Universal
Ironmansoftware
6.1
0%
Jan 7Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13
CVE-2023-49213
PU
Powershell Universal
Ironmansoftware
8.8
2%
Nov 23The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due…
CVE-2022-45184
PU
Powershell Universal
Ironmansoftware
7.2
2%
Nov 14The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with…
CVE-2022-45183
PU
Powershell Universal
Ironmansoftware
8.8
1%
Nov 14Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an…