CVE-2026-92237CWE-532

CVE-2026-92237

Medium · published September 16, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL parameter values written to the system log on instances backed by Microsoft SQL Server.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-09-16T01:16Z
References (1)
https://devolutions.net/security/advisories/DEVO-2026-0031/ · [email protected]
EPSS history
Timeline
  • 17 SEP 03:33Z
    EPSS moved — → 0%
    epss
  • 15 SEP 20:14Z
    Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an…
    cvelistv5