PowerShell Universal at a glance
- Last 12 months
- 14
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 1 | 0 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 1 | 0 |
| Jul 2026 | 5 | 0 |
| Jun 2026 | 2 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 2 | 0 |
| Feb 2026 | 1 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
14 results · Feed
-
High 8.7
Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in De…
-
Medium 6.5
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal …
-
High 8.1
Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2…
-
Medium 6.5
Cleartext storage of sensitive information in the variables feature in Devolutions PowerShell Universal 2026.2.2 and ea…
-
High 8.8
Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal …
-
High 8.8
Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2…
-
Medium 5.0
Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and…
-
Medium 6.5
Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2…
-
Medium 6.5
Insertion of sensitive information into sent data in the AI Agent job API in Devolutions PowerShell Universal 2026.2.0 …
-
Medium 5.3
Improper access control on the API documentation endpoint in PowerShell Universal
Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.
-
Medium 5.5
Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an aut…
-
High 8.3
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authe…
-
Medium 5.5
The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client s…
-
Medium 6.1
Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before …