CVE-2026-16799mediumCWE-862

CVE-2026-16799: medium-severity vulnerability in Devolutions PowerShell Universal

Published

Follow this CVE+ Monitor PowerShell Universal

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.3%
Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected products
Devolutions · PowerShell Universal
Related CVEs — Devolutions PowerShell Universal

In the same product, most dangerous first.

CVE-2026-16801HIGHCVE-2026-16801EPSS 0.5%CVE-2026-16800HIGHCVE-2026-16800EPSS 0.5%CVE-2026-13437MEDIUMCVE-2026-13437EPSS 0.4%CVE-2026-19768HIGHCVE-2026-19768EPSS 0.4%CVE-2026-16798MEDIUMCVE-2026-16798EPSS 0.4%CVE-2026-92237MEDIUMCVE-2026-92237EPSS 0.4%