UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-116627
Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to execute arbitrary JavaScript in the browser of another user via a crafted notification target URL.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-27T15:29:09.616245+00:00
- Cve id
- CVE-2026-116627
- First seen by Signal
- 2026-10-27T15:31:26+00:00
- Retrieved at
- 2026-10-27T15:31:26+00:00
- Published at
- 2026-10-27T13:16:56.857
- Last modified
- 2026-10-27T13:16:56.857
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph