Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2026/08/21 2:00 p.m.•60 views

CVE-2026-15580 PassPortal browser extension: vault token disclosure via unvalidated postMessage

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

6.9CVSS0.0019EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/21 12:00 a.m.•2 views

CVE-2026-15580: Missing Origin Validation in WebSockets

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6...

6.9CVSS5.8AI score0.0019EPSS
SaveExploits0References2
Rows per page
Query Builder