PUBLISHED
2026-06-12 15:16
MODIFIED
2026-06-12 15:57
EPSS (Prob. Exploit)
0.22%
Top 87.3%
> DESCRIPTION
Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-306: Missing Authentication for Critical Functionality - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
> HISTORIQUE DES MODIFICATIONS
Première apparition
12/06/2026 15:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-306: Missing Authentication for Critical Function - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of res...
Nouvelle valeur:
CWE-306: Missing Authentication for Critical Functionality - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount o...
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-306: Missing Authentication for Critical Function - The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of res...
Total des modifications: 2
Dernière mise à jour: 6 days ago