SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-84699

CRITICAL · CVSS 9.1 EPSS 0.37%

Source: NVD + CISA KEV + EPSS · Published 2026-09-02 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

Team Password Manager versions prior to 14.184.308 are vulnerable due to inadequate enforcement of authentication during the local account password reset process. This flaw allows unauthenticated attackers to reset passwords for local accounts, enabling unauthorized access to user accounts. Organizations using this software should prioritize immediate updates to mitigate the risk of unauthorized access to sensitive information.

CVE
CVE-2026-84699
Severity
CRITICAL
CVSS
9.1
EPSS
0.37%

Original NVD Description

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access.