CVE-2026-3563CWE-1289

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to…

Medium · published March 17, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Weakness
CWE-1289 · Improper Validation of Unsafe Equivalence in Input
Published
2026-03-17T19:15Z
EPSS history
Timeline
  • 17 MAR 19:15Z
    Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to…
    cvelistv5