https://vulnogram.org/ Most recent CVEs assigned by HYPR Corp (hypr). https://vulnogram.org/seaview/icons/hypr.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-15468 https://vulnogram.org/CVE-2026-15468 Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3. Medium Tue, 13 Oct 2026 22:32:35 GMT https://vulnogram.org/CVE-2026-4522 https://vulnogram.org/CVE-2026-4522 Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1. Medium Thu, 25 Jun 2026 15:39:28 GMT https://vulnogram.org/CVE-2026-2414 https://vulnogram.org/CVE-2026-2414 Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2. Medium Wed, 25 Mar 2026 17:03:03 GMT https://vulnogram.org/CVE-2026-1712 https://vulnogram.org/CVE-2026-1712 Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7. Medium Wed, 25 Mar 2026 16:56:05 GMT https://vulnogram.org/CVE-2024-8273 https://vulnogram.org/CVE-2024-8273 Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1. High Network Exploitable Thu, 11 Dec 2025 16:29:32 GMT https://vulnogram.org/CVE-2025-2102 https://vulnogram.org/CVE-2025-2102 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1. Medium Wed, 21 May 2025 17:19:02 GMT https://vulnogram.org/CVE-2025-0372 https://vulnogram.org/CVE-2025-0372 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1. Medium Wed, 21 May 2025 17:12:08 GMT https://vulnogram.org/CVE-2024-1721 https://vulnogram.org/CVE-2024-1721 Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1. Medium Tue, 21 May 2024 15:41:49 GMT https://vulnogram.org/CVE-2024-0068 https://vulnogram.org/CVE-2024-0068 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1. Medium Thu, 29 Feb 2024 19:51:38 GMT https://vulnogram.org/CVE-2023-6336 https://vulnogram.org/CVE-2023-6336 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. High Tue, 16 Jan 2024 19:42:09 GMT https://vulnogram.org/CVE-2023-6335 https://vulnogram.org/CVE-2023-6335 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. Medium Tue, 16 Jan 2024 19:42:02 GMT https://vulnogram.org/CVE-2023-6334 https://vulnogram.org/CVE-2023-6334 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7. Medium Tue, 16 Jan 2024 19:41:52 GMT https://vulnogram.org/CVE-2023-5097 https://vulnogram.org/CVE-2023-5097 Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7. High Tue, 16 Jan 2024 19:40:57 GMT https://vulnogram.org/CVE-2023-1837 https://vulnogram.org/CVE-2023-1837 Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs) High Tue, 23 May 2023 18:23:04 GMT https://vulnogram.org/CVE-2023-1477 https://vulnogram.org/CVE-2023-1477 Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3. High Fri, 28 Apr 2023 14:56:02 GMT https://vulnogram.org/CVE-2023-0834 https://vulnogram.org/CVE-2023-0834 Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1. High Fri, 28 Apr 2023 14:54:53 GMT https://vulnogram.org/CVE-2022-3258 https://vulnogram.org/CVE-2022-3258 Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse. Low Thu, 03 Nov 2022 18:04:32 GMT https://vulnogram.org/CVE-2022-2193 https://vulnogram.org/CVE-2022-2193 Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR… High Tue, 19 Jul 2022 14:07:50 GMT https://vulnogram.org/CVE-2022-1984 https://vulnogram.org/CVE-2022-1984 This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload. Medium Tue, 19 Jul 2022 14:07:45 GMT https://vulnogram.org/CVE-2022-2192 https://vulnogram.org/CVE-2022-2192 Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10… High Tue, 19 Jul 2022 14:07:38 GMT