VULNERABILITY INTELLIGENCE

CVE-2026-16799

CVSS score5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-07-24
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Description

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.

Weakness classification

  • security@devolutions.net: CWE-862

Primary references