PT-2026-64311 · Devolutions · Powershell Universal

CVE-2026-16802 · Publicado 2026-07-24 · Atualizado 2026-07-24

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a local actor with file system access to read secret values via secret variables stored in cleartext on disk when no vault is selected.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2026-16802

Produtos afetados

Powershell Universal

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-16802 · Nota de Segurança
• https://devolutions.net/security/advisories/DEVO-2026-0025 · Nota