> CVE-2026-92237

« BACK_TO_HOME
PUBLISHED
2026-09-15 21:16
MODIFIED
2026-09-15 21:16
EPSS (Prob. Exploit)
0.37%
Top 70.5%
DATA SOURCES:
NVD 🔗 2026-09-15 CWE MITRE 🔗 2026-10-01 FIRST EPSS 🔗 2026-10-18

> DESCRIPTION

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL parameter values written to the system log on instances backed by Microsoft SQL Server.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-532

> CWE DETAILED DESCRIPTIONS

CWE-532: Insertion of Sensitive Information into Log File - The product writes sensitive information to a log file.

> HISTORIQUE DES MODIFICATIONS

Première apparition
15/09/2026 21:16
Source: NVD
📊 ENRICHISSEMENT 01/10/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-532: Insertion of Sensitive Information into Log File - The product writes sensitive information to a log file.
Total des modifications: 1 Dernière mise à jour: 3 weeks ago

> REFERENCES

https://devolutions.net/security/advisories/DEVO-2026-0031/
« BACK_TO_HOME