HYPR

Latest CVEs · RSS

• CVE-2026-15468 2026-10-13 · CVSS 6.9
  Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordles
• CVE-2026-4522 2026-06-25 · CVSS 6.7
  Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordles
• CVE-2026-2414 2026-03-25 · CVSS 5.6
  Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.
• CVE-2026-1712 2026-03-25 · CVSS 5.8
  Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7.
• CVE-2024-8273 2025-12-11 · CVSS 7.1
  Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1.
• CVE-2025-2102 2025-05-21 · CVSS 5.7
  Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR
• CVE-2025-0372 2025-05-21 · CVSS 5.9
  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escal
• CVE-2024-1721 2024-05-21 · CVSS 5.6
  Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Password
• CVE-2024-0068 2024-02-29 · CVSS 5.5
  Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workf
• CVE-2023-6336 2024-01-16 · CVSS 7.2
  Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affect
• CVE-2023-6335 2024-01-16 · CVSS 6.4
  Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affe
• CVE-2023-6334 2024-01-16 · CVSS 5.3
  Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue aff
• CVE-2023-5097 2024-01-16 · CVSS 7.0
  Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7.
• CVE-2023-1837 2023-05-23 · CVSS 8.5
  Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: be
• CVE-2023-1477 2023-04-28 · CVSS 7.2
  Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extens
• CVE-2023-0834 2023-04-28 · CVSS 7.0
  Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce A
• CVE-2022-3258 2022-11-03 · CVSS 3.7
  Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.
• CVE-2022-2193 2022-07-19 · CVSS 7.5
  Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitr
• CVE-2022-1984 2022-07-19 · CVSS 4.5
  This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow loc
• CVE-2022-2192 2022-07-19 · CVSS 7.5
  Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path