IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-07-24 15:17

MODIFIED

2026-07-24 15:17

EPSS (Prob. Exploit)

0.25%

Top 83.9%

DATA SOURCES:

NVD 🔗 2026-07-24 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

Improper access control in the automation tests and workflows features in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with only the Reader role to execute automation tests and modify workflow properties via missing server-side authorization checks.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-862

> CWE DETAILED DESCRIPTIONS

CWE-862: Missing Authorization - The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

> HISTORIQUE DES MODIFICATIONS

Première apparition

24/07/2026 15:17

Source: NVD

📊 ENRICHISSEMENT 01/08/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-862: Missing Authorization - The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Total des modifications: 1 Dernière mise à jour: 3 months ago

> REFERENCES

https://devolutions.net/security/advisories/DEVO-2026-0025/