What is the CVSS score of CVE-2026-10696?

CVE-2026-10696 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.3%.

Which versions of UniGetUI are affected by CVE-2026-10696?

Devolutions UniGetUI 2026.2.0 and earlier contains an arbitrary installer execution vulnerability allowing attackers to publish crafted packages that spoof legitimate applications, triggering…

How to fix or mitigate CVE-2026-10696?

Within 24 hours, inventory all systems running Devolutions UniGetUI 2026.2.0 or earlier via asset management and endpoint tools. Within 7 days, deploy guidance to disable automatic update checking in UniGetUI settings and restrict catalog sources to official repositories only; audit systems for suspicious recent installations. Within 30 days, monitor Devolutions security advisories for patched versions, validate updates in isolated test environments, and execute phased rollout to production systems.

UniGetUI CVE-2026-10696

HIGH

Use of Incorrectly-Resolved Name or Reference (CWE-706)

2026-06-17 DEVOLUTIONS

Information Disclosure Unigetui Devolutions

7.5

CVSS 3.1 · Vendor: DEVOLUTIONS

Severity by source

Vendor (DEVOLUTIONS) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

5.3 MEDIUM

Attacker needs open community-contributor status (PR:N) but victim must apply the update (UI:R) and a name-substring match must occur (AC:H); impact is attacker-installer execution, so I:H.

3.1 AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

4.0 AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (DEVOLUTIONS).

CVSS VectorVendor: DEVOLUTIONS

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 21:20 vuln.today

CVE Published

Jun 17, 2026 - 18:43 cve.org

UNKNOWN (no severity yet)

CVE Published

Jun 17, 2026 - 18:43 cve.org

HIGH 7.5

DescriptionCVE.org

Use of an incorrectly resolved name or reference in the pinget backend in Devolutions UniGetUI 2026.2.0 and earlier allows a WinGet community catalog contributor to cause an installed application to be correlated to an unrelated, attacker-controlled catalog package and to execute an attacker-controlled installer via a crafted catalog package whose normalized name is contained as a substring within the installed application name when a user applies the proposed update.

AnalysisAI

Arbitrary installer execution in Devolutions UniGetUI 2026.2.0 and earlier lets a WinGet community catalog contributor hijack a user's software update: because the pinget backend correlates installed applications to catalog packages by loose name-substring matching, an attacker can publish a crafted community package whose normalized name is a substring of a legitimate installed app's name, causing UniGetUI to offer and - when the user accepts - run the attacker's installer. No public exploit identified at time of analysis and it is not listed in CISA KEV; EPSS is low at 0.27% (18th percentile), consistent with the fact that success requires a matching installed application and the victim actively applying the malicious update.

Technical ContextAI

UniGetUI (formerly WingetUI) is a Windows GUI front-end for command-line package managers, and this flaw sits in its 'pinget' backend that reconciles locally installed applications with packages available in the WinGet community catalog. The root cause is CWE-706 (Use of an Incorrectly Resolved Name or Reference): the backend identifies which catalog package corresponds to an installed application by treating a package's normalized name as equivalent when it appears merely as a substring of the installed application name, rather than requiring an authoritative, unique identifier match. Because the WinGet community catalog is a public, contributor-driven repository, any accepted contributor can introduce a package whose normalized name is deliberately chosen to substring-match a widely installed product, breaking the trust boundary between 'the package for the app I installed' and 'an arbitrary attacker-authored package.' The affected component is identified by CPE cpe:2.3:a:devolutions:unigetui, all versions up to and including 2026.2.0.

RemediationAI

Patch available per vendor advisory (Devolutions DEVO-2026-0019, https://devolutions.net/security/advisories/DEVO-2026-0019) - upgrade UniGetUI to the fixed release published after 2026.2.0; an exact fixed version number is not stated in the available data, so confirm the target version directly from the advisory before deploying. Until upgraded, reduce exposure by not accepting proposed updates that come from the WinGet community catalog for applications you did not knowingly install from that source, and by scrutinizing the package source/publisher of any offered update before applying it (trade-off: manual review slows patching workflows). Where feasible, restrict UniGetUI to trusted first-party sources (e.g. the winget 'msstore' or vetted enterprise sources) and disable or avoid the community catalog as an update source (trade-off: fewer available packages/updates). Because exploitation requires the user to click 'apply update,' end-user awareness that an installer-execution risk exists in this flow is itself a meaningful compensating control.