5

CVE-2026-16799

EPSS 0.15%
Veröffentlicht 24.07.2026 15:17:12
Zuletzt bearbeitet 29.07.2026 20:33:19
CVE-Watchlists
Login
Unerledigt
Login

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Devolutions ≫ Powershell Universal Version < 2026.2.3.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.048

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	5	3.1	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://devolutions.net/security/advisories/DEVO-2026-0025/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-16799

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-16799

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-16799

EUVD