CVE-2026-129110

sysPass versions 3.0.1 through 3.2.11 are vulnerable to an authentication bypass because the install/install handler fails to check if the instance is already installed. An unauthenticated attacker can POST to this handler to overwrite config.xml , redirect the application to an attacker-controll...