Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-3563 EUVD-2026-12636GHSA-gx25-v2f3-ppxq

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with…

Published Mar 17, 2026 · Updated Mar 17, 2026 · Assigned by DEVOLUTIONS

Description

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.

Affected products

VendorProductAffectedFixed
Devolutions PowerShell Universal 2026.1.0 – < 2026.1.4 2026.1.4

References