PasswordPusher

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

PasswordPusher records in CISA KEV

No PasswordPusher vulnerabilities are listed in CISA KEV.

1 record

TI-2026-42623 CVE-2026-59802

MEDIUM 61

PasswordPusher before 2.8.1 accepts data URI schemes in URL push payloads due to insufficient validation in the valid_url function.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00237 Published 2026-07-08 Fixed in 2.8.1 CWE-183