PUBLISHED
2026-03-17 20:16
MODIFIED
2026-03-17 20:16
EPSS (Prob. Exploit)
0.41%
Top 65.8%
> DESCRIPTION
Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-1289: Improper Validation of Unsafe Equivalence in Input - The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value.
> GITHUB SECURITY ADVISORY
GHSA-mgq6-vr84-7m2j
HIGH
OpenClaw: QQBot native approval buttons did not enforce configured approver identity
AFFECTED PACKAGES:
NPM / openclaw
< 2026.5.18
Fixed in: 2026.5.18
> HISTORIQUE DES MODIFICATIONS
Première apparition
17/03/2026 20:16
Source: NVD
📊
ENRICHISSEMENT
01/04/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-1289: Improper Validation of Unsafe Equivalence in Input - The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorre...
Total des modifications: 1
Dernière mise à jour: 7 months ago