PT-2026-29212

Name of the Vulnerable Software and Affected Versions Teampass versions prior to 3.1.5.16 Description The application does not properly clean or encode user-provided information during failed authentication attempts. Specifically, the contraseña parameter within the login form at...

CVE-2026-3106: Improper Neutralization of Input During Web Page Generation

Blind Cross-Site Scripting XSS in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the application does not properly clean or encode the information...