Log in Start free

HYPR

Products

ProductCVEsExploitedLatest
Workforce Access7–Feb 29, 2024
Passwordless5–Oct 13, 2026
HYPR Server3–May 23, 2023
Server3–Mar 25, 2026
HYPR Windows WFA1–Jul 19, 2022
Keycloak Authenticator Extension1–Apr 28, 2023

Exploited and recent CVEs

  • CVE-2026-15468 Medium 6.9 Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3. 0.1%
  • CVE-2026-4522 Medium 6.7 Missing authentication for critical function vulnerability in HYPR Passwordless on Windows allows Credentials Interception. This issue affects HYPR Passwordless: before 11.1.1. 0.2%
  • CVE-2026-2414 Medium 5.6 Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2. 0.3%
  • CVE-2026-1712 Medium 5.8 Incorrect privilege assignment vulnerability in HYPR Server allows Privilege Escalation.This issue affects HYPR Server: from 10.5.1 before 10.7. 0.3%
  • CVE-2024-8273 High 7.1 Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1. 0.3%
  • CVE-2025-2102 Medium 5.7 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1. 0.2%
  • CVE-2025-0372 Medium 5.9 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordle 0.1%
  • CVE-2024-1721 Medium 5.6 Improper Verification of Cryptographic Signature vulnerability in HYPR Passwordless on Windows allows Malicious Software Update.This issue affects HYPR Passwordless: before 9.1. 0.1%
  • CVE-2024-0068 Medium 5.5 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1. 0.2%
  • CVE-2023-6336 High 7.2 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. 0.2%
  • CVE-2023-6335 Medium 6.4 Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. 0.2%
  • CVE-2023-6334 Medium 5.3 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7. 0.1%
  • CVE-2023-5097 High 7.0 Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7. 0.2%
  • CVE-2023-1837 High 8.5 Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs) 0.5%
  • CVE-2023-1477 High 7.2 Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3. 0.6%
  • CVE-2023-0834 High 7.0 Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue affects Workforce Access: from 6.12 before 8.1. 0.4%
  • CVE-2022-3258 Low 3.7 Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse. 0.3%
  • CVE-2022-2193 High 7.5 Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in 1.0%
  • CVE-2022-1984 Medium 4.5 This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate pr 0.2%
  • CVE-2022-2192 High 7.5 Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This i 1.1%