Command and Code Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with varia…CVE-2026-16801Devolutions · CVSS 8.8 · 0.5% likely

   CWE-94

2. Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with schedu…CVE-2026-16800Devolutions · CVSS 8.8 · 0.5% likely

   CWE-94

3. Improper input validation in the SSH Elevate Shell feature allows an authenticated user with permission to create or modify a shared SSH entry to execute arbitrary commands on a r…CVE-2026-12161Devolutions · CVSS 8.8 · 0.4% likely

   CWE-78

4. Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settin…CVE-2026-19768Devolutions · CVSS 8.1 · 0.4% likely

   CWE-94

5. Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIB_INSERT_LIBRARIES environment variable.CVE-2023-6288Devolutions · 0.3% likely

   CWE-94

6. Improper neutralization of special elements in the built-in PAM provider password rotation templates in Devolutions Server allows an authenticated user with write access to a vaul…CVE-2026-10544Devolutions · CVSS 6.5 · 0.2% likely

   CWE-78

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.