2 matches found
CVE-2026-15580 PassPortal browser extension: vault token disclosure via unvalidated postMessage
vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...
6.9CVSS0.0019EPSS
SaveExploits0References1
CVE-2026-15580: Missing Origin Validation in WebSockets
vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...
6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References2
20