Threat database

CVE-2026-15468 is an authorization bypass vulnerability in HYPR Passwordless on Windows that allows privilege escalation. It affects versions prior to 11.3.3. The vulnerability arises from a user-controlled key that can be exploited to bypass authorization checks.

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.

CVE-2026-2414 is an authorization bypass vulnerability in HYPR Server versions from 9.5.2 up to but not including 10.7.2. It allows privilege escalation through a user-controlled key. The vulnerability is classified under CWE-639, which involves authorization bypass due to improper control of user-supplied keys. The CVSS 4.0 base score is 5.6, indicating a medium severity level.

Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7.

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1.

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.