PT-2026-64308 · Devolutions · Powershell Universal

CVE-2026-16799 · Publicado 2026-07-24 · Atualizado 2026-07-24

Mitre

CVSS v3.1

5.0

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-16799

Produtos afetados

Powershell Universal

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-16799 · Nota de Segurança
• https://devolutions.net/security/advisories/DEVO-2026-0025 · Nota