Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Password Manager Clear all filters
TI-2026-09305 CVE-2026-10839 · GHSA-f2w7-fcqj-g66g

Open redirection vulnerability in Password Manager

Priority LOW 30

Open redirection vulnerability in the authentication system allows an attacker to use manipulated values in the X-Forwarded-Host header to alter the URLs generated by the application.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0042 Published 2026-06-17 Fixed in 08/07/2025 CWE-601
TI-2026-09304 CVE-2026-10837 · GHSA-xrj3-vmwr-69x4

Open redirection vulnerability in Password Manager

Priority LOW 23

Open redirection vulnerability due to insufficient validation of the X-Forwarded-Host HTTP header.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00315 Published 2026-06-17 Fixed in 08/07/2025 CWE-601
TI-2026-09303 CVE-2026-10836 · GHSA-6pqv-g4gv-cwmh

Improper neutralization of HTTP headers in Password Manager

Priority LOW 23

Improper handling of HTTP headers that allows a remote attacker to manipulate the value of the Host header using specially crafted requests.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00308 Published 2026-06-17 Fixed in 08/07/2025 CWE-644