Skip to main content

PowerShell Universal EUVDEUVD-2026-79941

| CVE-2026-92237 MEDIUM
Insertion of Sensitive Information into Log File (CWE-532)
2026-09-15 security@devolutions.net GHSA-wchh-mww7-897w
Information Disclosure Microsoft Devolutions
6.5
CVSS 3.1 · Vendor: devolutions
Share

Severity by source

Vendor (devolutions) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vuln.today AI
6.5 MEDIUM

Authenticated user needs log-read permission (PR:L) and only reads leaked secrets (C:H, I:N/A:N); attack is network-reachable console access with no added complexity beyond the stated MSSQL/logging preconditions.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (devolutions).

CVSS VectorVendor: devolutions

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

5
Metadata Corrected
Sep 16, 2026 - 21:40 vuln.today
tag: Devolutions added
Analysis Generated
Sep 16, 2026 - 20:50 vuln.today
CVSS changed
Sep 16, 2026 - 18:22 NVD
6.5 (MEDIUM)
CVE Published
Sep 15, 2026 - 21:16 cve.org
MEDIUM 6.5
CVE Published
Sep 15, 2026 - 21:16 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL parameter values written to the system log on instances backed by Microsoft SQL Server.

AnalysisAI

Authenticated users who hold log-read permission on Devolutions PowerShell Universal 2026.2.5 and earlier can recover application tokens, data protection key material, and other stored credentials, because the slow query logging feature writes raw SQL parameter values into the system log on instances backed by Microsoft SQL Server. The issue is CWE-532 (insertion of sensitive information into a log file) and carries a CVSS v3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N), meaning confidentiality is fully impacted while integrity and availability are untouched. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Requires: (1) an authenticated PowerShell Universal account holding log-read permission (PR:L); (2) the instance backed by Microsoft SQL Server - instances on other database backends are not indicated as affected; and (3) the slow query logging feature actively writing SQL parameter values to the system log. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a genuine but moderate-priority information-disclosure flaw, not an inflated high-CVSS issue. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation No exact fixed version is specified in the provided data, so patch availability must be confirmed through the vendor advisory at https://devolutions.net/security/advisories/DEVO-2026-0031/; upgrade PowerShell Universal beyond 2026.2.5 as soon as Devolutions publishes the corrected release. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Devolutions

View all
CVE-2026-3204 CRITICAL
9.8 Mar 03

Input validation flaw in Devolutions Server error message page enables remote spoofing attacks.
CVE-2026-3224 CRITICAL
9.8 Mar 03

Azure AD auth bypass in Devolutions Server 2025.3.15.0 and earlier.
CVE-2026-2590 CRITICAL
9.8 Mar 03

Insecure password saving enforcement in Devolutions Remote Desktop Manager 2025.3.
CVE-2026-0610 CRITICAL
9.8 Jan 19

Devolutions Server 2025.3.1 through 2025.3.6 contains a SQL injection vulnerability in the remote sessions component tha
CVE-2026-3130 CRITICAL
9.8 Mar 03

Behavioral control bypass in Devolutions Server 2025.3.15 allows authenticated users to exploit delete permissions.
CVE-2024-6057 CRITICAL
9.8 Jun 17

Improper authentication in the vault password feature in Devolutions Remote Desktop Manager 2024.1.31.0 and earlier allo
CVE-2024-2921 CRITICAL
9.8 Mar 26

Improper access control in PAM vault permissions in Devolutions Server 2024.1.10.0 and earlier allows an authenticated u
CVE-2023-6593 CRITICAL
9.8 Dec 12

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker tha
CVE-2023-5766 CRITICAL
9.8 Nov 01

A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to r
CVE-2023-5765 CRITICAL
9.8 Nov 01

Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on

CVE-2023-4373 CRITICAL
9.8 Aug 21

Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager ve
CVE-2021-23921 CRITICAL
9.1 Apr 01

An issue was discovered in Devolutions Server before 2020.3. Rated critical severity (CVSS 9.1), this vulnerability is r

Same weakness CWE-532 – Insertion of Sensitive Information into Log File

View all
CVE-2023-43261 HIGH POC
7.5
CVE-2025-24984 MEDIUM
4.6
CVE-2017-8075 CRITICAL POC
9.8
CVE-2017-8074 CRITICAL POC
9.8
CVE-2026-22778 CRITICAL POC
9.8
CVE-2019-17395 CRITICAL POC
9.8
CVE-2019-17398 CRITICAL POC
9.8
CVE-2019-17394 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

EUVD-2026-79941 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy