Cross-site Scripting Vulnerability in Devolutions PowerShell Universal
CVE-2026-0618

6.1MEDIUM

Key Information:

Vendor

Devolutions

Status
Powershell Universal
Vendor
CVE Published:
7 January 2026

What is CVE-2026-0618?

A Cross-site Scripting vulnerability has been identified in Devolutions PowerShell Universal, specifically impacting versions prior to 4.5.6 and 5.6.13. This vulnerability allows attackers to inject malicious scripts into web pages viewed by other users, potentially compromising sensitive information or user accounts. It is crucial for organizations using affected versions to review their security measures and apply necessary updates to mitigate this risk.

Affected Version(s)

PowerShell Universal 0 < 5.6.13

PowerShell Universal 0 < 4.5.6

References

https://devolutions.net/security/advisories/DEVO-2026-0001/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.