Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3563 PowerShell Universal Authenticated Route Manipulation Vulnerability Before 2026.1.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3563
Post summary
CVE‑2026‑3563, a PowerShell universal route manipulation vulnerability affecting versions before 2026.1.4, has been disclosed without any PoC, exploit, or patch details.
CVE-2026-3563 Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or mod… https://www.cve.org/CVERecord?id=CVE-2026-3563
Post summary
The snippet announces CVE‑2026‑3563, detailing an improper input validation flaw in PowerShell Universal that allows authenticated users to modify configuration, but provides no evidence of exploits, patches, or active attacks.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ironmansoftware | powershell_universal | - | - | - |