What is CVE-2026-3563?

CVE-2026-3563 is a medium-severity vulnerability in Devolutions Powershell Universal, classified under CWE-1289. CVSS score: 5.5/10. Published 2026-03-17.

How severe is CVE-2026-3563?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Devolutions Powershell Universal

CVE-2026-3563

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes…

EPSS: 0.003 (26.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L.

Affected products

Devolutions Powershell Universal — versions 2026.1.0
Ironmansoftware Powershell_universal

Weakness classification (CWE)

CWE-1289

References

security@devolutions.net (Vendor Advisory)

Frequently asked questions

What is CVE-2026-3563?: CVE-2026-3563 is a medium-severity vulnerability in Devolutions Powershell Universal, classified under CWE-1289. CVSS score: 5.5/10. Published 2026-03-17.
How severe is CVE-2026-3563?: Medium severity. CVSS v3 base score is 5.5 out of 10.