Ironmansoftware

8 CVEs across 1 Ironmansoftware products. Browse Ironmansoftware vulnerabilities, severities, and proof-of-concept exploits.

Ironmansoftware products with known CVEs

ProductCVEs
Powershell Universal8
Ironmansoftware CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8694Medium5.32026-06-12Improper access control in Devolutions PowerShell Universal 2026.1.7 and earlier allows an unauthenticated remote attacker to obtain the OpenAPI specification…
CVE-2026-4064High8.32026-03-17Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to by…
CVE-2026-3563Medium5.52026-03-17Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to crea…
CVE-2026-3277Medium6.52026-02-27The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/a…
CVE-2026-0618Medium6.12026-01-07Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.
CVE-2023-49213High8.82023-11-23The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param…
CVE-2022-45184High7.22022-11-14The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a rem…
CVE-2022-45183High8.82022-11-14Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app…