CVE-2026-16799: Medium severity Devolutions PowerShell Universal vulnerability
Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-16799?
The severity of CVE-2026-16799 is medium with a CVSS score of 5.
What type of vulnerability is CVE-2026-16799?
CVE-2026-16799 is classified as an improper access control vulnerability.
Who is affected by the CVE-2026-16799 vulnerability?
Authenticated users with the Reader role in Devolutions PowerShell Universal versions 2026.2.2 and earlier are affected by CVE-2026-16799.
How can I mitigate the risk of CVE-2026-16799?
To mitigate the risk of CVE-2026-16799, ensure that proper server-side authorization checks are in place for automation tests and workflow properties.
What versions of Devolutions PowerShell Universal are vulnerable to CVE-2026-16799?
Devolutions PowerShell Universal versions 2026.2.2 and earlier are vulnerable to CVE-2026-16799.