1. Home
  2. CVE Database
  3. CVE-2026-3563
MEDIUM · 5.5

CVE-2026-3563

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to overrid...

Vulnerability Description

Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to override existing application or system routes, resulting in unintended request routing and denial of service via a conflicting URL path.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
IronmansoftwarePowershell Universal< 2026.1.4

Related Weaknesses (CWE)

CWE-1289

References

FAQ

What is CVE-2026-3563?

CVE-2026-3563 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or modify Apps or Endpoints to overrid...

How severe is CVE-2026-3563?

CVE-2026-3563 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-3563?

Check the references section above for vendor advisories and patch information. Affected products include: Ironmansoftware Powershell Universal.