BaseFortify

Publication date: 2026-01-07

Last updated on: 2026-01-08

Assigner: Devolutions Inc.

Description

Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-07

Last Modified

2026-01-08

Generated

2026-07-06

AI Q&A

2026-01-07

EPSS Evaluated

2026-07-05

NVD

CVE-2026-0618

EUVD

EUVD-2026-1201

Affected Vendors & Products

Vendor	Product	Version / Range
devolutions	powershell_universal	to 5.6.13 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cross-site Scripting (XSS) issue in Devolutions PowerShell Universal affecting versions before 4.5.6 and before 5.6.13. XSS vulnerabilities allow attackers to inject malicious scripts into web applications, which can then be executed by other users.

Impact Analysis

The impact of this vulnerability could include unauthorized execution of malicious scripts in the context of the affected application, potentially leading to data theft, session hijacking, or other malicious actions performed on behalf of the user.

Hi! I’m here to help you understand CVE-2026-0618. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70