CVE-2026-19768
Received Received - Intake

PowerShell Code Injection in Devolutions PowerShell Universal

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: Devolutions Inc.

Description
Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped when written to the settings configuration file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-19768
EUVD
EUVD-2026-58661

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
devolutions powershell_universal to 2026.2.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a code injection vulnerability in Devolutions PowerShell Universal 2026.2.3 and earlier. An authenticated user with settings management permissions can execute arbitrary PowerShell code by exploiting improperly escaped settings values. These crafted values are written to the settings configuration file without proper validation, allowing code execution.

Detection Guidance

Check PowerShell Universal version with 'Get-PSUVersion' in PowerShell. Inspect settings files for unexpected PowerShell code in configuration values. Monitor logs for unauthorized PowerShell execution attempts.

Impact Analysis

If exploited, this vulnerability could allow attackers to run malicious PowerShell code on the affected system. This may lead to unauthorized access, data theft, system compromise, or further network infiltration. The impact depends on the permissions of the compromised account.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, reputational damage, and loss of trust if such incidents occur due to inadequate security controls.

Mitigation Strategies

Upgrade to PowerShell Universal version 2026.2.4 or higher immediately. Remove settings management permissions from untrusted users until upgrade is complete. Review and sanitize existing settings configuration files for malicious code.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19768. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart