Security Advisory

CVE-2026-15580

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 14:00:10

Last updated 2026-08-21 15:07:33

Assigner N-able

CVSS score 6.9

State PUBLISHED

Description

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6.

← Browse all CVEs View on cve.org ↗