Security Advisory

CVE-2026-3277

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-27 15:11:18

Last updated 2026-03-30 20:43:33

Assigner DEVOLUTIONS

State PUBLISHED

Description

The OpenID Connect (OIDC) authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials

← Browse all CVEs View on cve.org ↗