Read the docs

Password Manager

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Password Manager records in CISA KEV

No Password Manager vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-09305 CVE-2026-10839 · GHSA-f2w7-fcqj-g66g

Open redirection vulnerability in Password Manager

Priority LOW 30

Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0042 Published 2026-06-17 Fixed in 08/07/2025 CWE-601
TI-2026-09304 CVE-2026-10837 · GHSA-xrj3-vmwr-69x4

Open redirection vulnerability in Password Manager

Priority LOW 23

Open redirection vulnerability due to insufficient validation of the X-Forwarded-Host HTTP header.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00315 Published 2026-06-17 Fixed in 08/07/2025 CWE-601
TI-2026-09303 CVE-2026-10836 · GHSA-6pqv-g4gv-cwmh

Improper neutralization of HTTP headers in Password Manager

Priority LOW 23

Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00308 Published 2026-06-17 Fixed in 08/07/2025 CWE-644
Open these records in search →