Known Vulnerabilities for Passwordless by HYPR
Listed below are 10 of the newest known vulnerabilities associated with "Passwordless" by "HYPR".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105209 json | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or pas... | Not Provided | 2026-10-04 | 2026-10-05 |
| CVE-2026-85649 json | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha ... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-75957 json | The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypa... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-73533 json | Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served throu... | Not Provided | 2026-08-13 | 2026-08-17 |
| CVE-2026-73532 json | Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served throug... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73420 json | NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the defa... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-72693 json | `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged conte... | Not Provided | 2026-08-11 | 2026-10-09 |
| CVE-2026-67327 json | better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to a... | Not Provided | 2026-08-01 | 2026-08-03 |
| CVE-2026-62862 json | Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-61498 json | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoin... | Not Provided | 2026-07-13 | 2026-07-28 |