Read the docs

HYPR

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

HYPR records in CISA KEV

No HYPR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Workforce Access 8 records MEDIUM Hypr Server 4 records MEDIUM Hypr 1 record LOW Keycloak Authenticator 1 record MEDIUM

Records

20 records

TI-2023-00790 CVE-2023-0834 · GHSA-jg74-q54f-rr76

Incorrect permission assignment in HYPR Workforce Access

Priority MEDIUM 43

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00368 Published 2023-04-28 Fixed in 8.1 CWE-732
TI-2023-01725 CVE-2023-1837 · GHSA-vhrm-3gmw-7rpc

Missing authentication in HYPR Server

Priority MEDIUM 41

Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs)

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00548 Published 2023-05-23 Fixed in 8.0 CWE-306
TI-2023-01396 CVE-2023-1477 · GHSA-p9xp-jx22-qh3q

Improper authentication in HYPR Keycloak Authenticator Extension

Priority MEDIUM 41

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0062 Published 2023-04-28 Fixed in 7.10.2, 8.0.3 CWE-287
TI-2022-02030 CVE-2022-2193 · GHSA-v6fx-fw28-5wwr

Authorization bypass in HYPR Server

Priority MEDIUM 40

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager p…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00999 Published 2022-07-19 Fixed in 6.14.1 CWE-280
TI-2022-03010 CVE-2022-3258 · GHSA-xvgv-pgqg-27v8

Incorrect permission assignment in HYPR Workforce Access

Priority LOW 38

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00272 Published 2022-11-03 Fixed in 7.7.1 CWE-732
TI-2023-05813 CVE-2023-6334 · GHSA-75hv-cf97-m8r8

Buffer overflow in HYPR Workforce Access

Priority LOW 35

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00147 Published 2024-01-16 Fixed in 8.7 CWE-120
TI-2023-05815 CVE-2023-6336 · GHSA-ghh4-4cxh-fcwj

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2023-05814 CVE-2023-6335 · GHSA-mmp5-hrvp-29pp

Link following in HYPR Workforce Access

Priority LOW 33

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2024-01-16 Fixed in 8.7 CWE-59
TI-2022-01839 CVE-2022-1984 · GHSA-jj9f-2mf3-f7x2

Deserialization of untrusted data in HYPR Windows WFA

Priority LOW 33

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malic…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0018 Published 2022-07-19 Fixed in 7.2 CWE-502
TI-2024-07669 CVE-2024-8273 · GHSA-2jg8-5xcc-qjcx

Authentication bypass by spoofing in HYPR Server

Priority LOW 31

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1.

CVSS 4.0HIGH 7.1 Network No auth User interaction EPSS 0.00311 Published 2025-12-11 Fixed in 10.1 CWE-290
TI-2024-00059 CVE-2024-0068 · GHSA-c48c-24j9-j745

Link following in HYPR Workforce Access

Priority LOW 31

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00216 Published 2024-02-29 Fixed in 8.7.1 CWE-59
TI-2023-04687 CVE-2023-5097 · GHSA-gqr6-mcvx-pvm6

Path traversal in HYPR Workforce Access

Priority LOW 30

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00187 Published 2024-01-16 Fixed in 8.7 CWE-22
TI-2026-03927 CVE-2026-4522 · GHSA-957m-3336-c6fv

Missing authentication in HYPR Passwordless

Priority LOW 29

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception.

CVSS 4.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00185 Published 2026-06-25 Fixed in 11.1.1 CWE-306
TI-2026-02047 CVE-2026-2414 · GHSA-6vqh-42ff-mf97

Authorization bypass in HYPR Server

Priority LOW 27

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.

CVSS 4.0MEDIUM 5.6 Physical Low privileges No interaction EPSS 0.00302 Published 2026-03-25 Fixed in 10.7.2 CWE-639
TI-2025-01839 CVE-2025-2102 · GHSA-472r-j47f-hrmv

Link following in HYPR Passwordless

Priority LOW 25

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1.

CVSS 4.0MEDIUM 5.7 Local High privileges User interaction EPSS 0.00169 Published 2025-05-21 Fixed in 10.1 CWE-59
TI-2025-00304 CVE-2025-0372 · GHSA-g2xr-q6h2-7768

Race condition in HYPR Passwordless

Priority LOW 25

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1.

CVSS 4.0MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00123 Published 2025-05-21 Fixed in 10.1 CWE-362
TI-2024-01600 CVE-2024-1721 · GHSA-338f-47mv-53ch

Improper signature verification in HYPR Passwordless

Priority LOW 24

Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1.

CVSS 4.0MEDIUM 5.6 Local High privileges User interaction EPSS 0.00107 Published 2024-05-21 Fixed in 9.1 CWE-347
Open these records in search →