Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-4522: HYPR Passwordless Windows Credentials Interception Risk

CVE-2026-4522 · published 4 months ago

Summary

A security issue in HYPR Passwordless on Windows means that an attacker could intercept sensitive credentials. This affects HYPR Passwordless on Windows versions before 11.1.1. To protect your data, update to the latest version of HYPR Passwordless on Windows.

Original advisory text

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception.

This issue affects HYPR Passwordless: before 11.1.1.

References

https://www.hypr.com/trust-center/security-advisories

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.7 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-306Missing Authentication for Critical Function

Timeline

Published25 Jun 2026

Updated28 Oct 2026

First seen25 Jun 2026

Sources

CVE-2026-4522 · NVD

Track software like this

Free during beta