CVE-2026-8694

MEDIUM 5.3CVE-2026-8694 · Published 12/06/2026 · updated 26/10/2026

In short

CVE-2026-8694 is a MEDIUM (CVSS 5.3) vulnerability affecting powershell universal (ironmansoftware).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.8% of all vulnerabilities.
Fix: update to 2026.1.7 or later.

Package	Affected versions	Patched versions
powershell universal ironmansoftware	`< 2026.1.7`	`2026.1.7`

Description

Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification of user-defined REST endpoints.

References

devolutions.net/security/advisories/DEVO-2026-0016 · Vendor Advisory

More vulnerabilities in powershell universal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

powershell universal

ironmansoftware

< 2026.1.7

2026.1.7

More vulnerabilities in powershell universal

See all →