Cleartext Storage Vulnerability in Devolutions PowerShell Universal Software
CVE-2026-16802

Currently unrated

Key Information:

Vendor: Devolutions
Status: Powershell Universal
Vendor: CVE Published:; 24 July 2026

🔔 Create Devolutions Vulnerability Alert

What is CVE-2026-16802?

The vulnerability allows unauthorized local access to sensitive information stored in cleartext within the variables feature of Devolutions PowerShell Universal. If a vault is not selected, secret values can be easily retrieved by individuals with file system access, presenting a significant risk of exposure and compromise of confidential data.

Affected Version(s)

PowerShell Universal 0 < 2026.2.3

References

https://devolutions.net/security/advisories/DEVO-2026-0025/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 24, 2026
Vulnerability Reserved
Jul 23, 2026

CVE-2026-16802 Data

JSON