Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based access controls and perform privileged operations — including reading sensitive data, creating or deleting resources, and disrupting service operations — via crafted gRPC requests.
CVSS Information
N/A
Vulnerability Type
授权机制缺失
Vulnerability Title
Devolutions PowerShell Universal 安全漏洞
Vulnerability Description
Devolutions PowerShell Universal是加拿大Devolutions公司的一个综合性PowerShell平台。 Devolutions PowerShell Universal 2026.1.4之前版本存在安全漏洞，该漏洞源于多个gRPC服务端点缺少授权检查，可能导致经过身份验证的用户绕过基于角色的访问控制并执行特权操作。
CVSS Information
N/A
Vulnerability Type
N/A