CVE-2026-3106criticalCWE-79

CVE-2026-3106: falha crítica em Teampass

Multiple vulnerabilities in Teampass

Publicada em

Seguir esta CVE+ Monitorar TeamPass

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.2%
Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the application does not properly clean or encode the information entered by the user in the username field. As a result, arbitrary JavaScript code is automatically executed in the administrator's browser when viewing failed login entries, resulting in a blind XSS condition.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Teampass · Teampass
CVEs relacionadas — Teampass

No mesmo produto, das mais perigosas para as menos.

CVE-2026-3107CRITICALMultiple vulnerabilities in TeampassEPSS 0.1%