Description
Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass role-based access controls and perform privileged operations — including reading sensitive data, creating or deleting resources, and disrupting service operations — via crafted gRPC requests.
INFO
Published Date :
2026-03-17T19:14:17.189Z
Last Modified :
2026-03-17T20:03:19.106Z
Source :
DEVOLUTIONS
AFFECTED PRODUCTS
The following products are affected by CVE-2026-4064 vulnerability.
| Vendors | Products |
|---|---|
| Devolutions |
|
| Ironmansoftware |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-4064.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact