HIGH 8.1 NVD

CVE-2026-19768

Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticat

Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped when written to the settings configuration file.

References

https://devolutions.net/security/advisories/DEVO-2026-0028/

Published: 2026-08-14 · Source: NVD · Feed updated: 2026-08-14

This high severity vulnerability with a CVSS score of 8.1 was published on 2026-08-14 via NVD.

vulnfeed aggregates 9887 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.