CVE-2026-15580

Vulnerability Description

vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6.

Related Weaknesses (CWE)

CWE-1385

References

https://me.n-able.com/s/security-advisory/aArVy0000002GQTKA2/cve202615580-vault-

FAQ

What is CVE-2026-15580?

CVE-2026-15580 is a documented vulnerability. vault token disclosure via unvalidated postMessage vulnerability in N-able PassPortal allows Authentication Abuse. This issue affects the PassPortal browser extension: before 3.49.6.

How severe is CVE-2026-15580?

CVSS scoring is not yet available for CVE-2026-15580. Check NVD for updates.

Is there a patch for CVE-2026-15580?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.