CVE-2026-84699 | BDVDB-2026-367493 Detail
Team Password ManagerTeam Password Manager
Description#
Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.