CVE-2026-4522

Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1.

Score

CVSS 4.0 6.7 Medium

Status

Awaiting Analysis - security@hypr.com

Published

2026-06-25

Last modified

2026-10-25

Weaknesses

CWE-306

Affected products

• Passwordless (Hypr)

References

• https://www.hypr.com/trust-center/security-advisories