VULNERABILITY INTELLIGENCE
CVE-2026-4522
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-06-25
Last modified2026-10-25
Description
Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.
Weakness classification
- security@hypr.com: CWE-306