Critical severity9.1NVD Advisory· Published Sep 2, 2026

CVE-2026-84699

Description

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access.

Affected products

TeamPasswordManager/TeamPasswordManagerllm-fuzzy
Range: <14.184.308

Patches

Vulnerability mechanics

References

teampasswordmanager.comnvd
teampasswordmanager.com/blog/chrome-extension-6.42.27-tpm-14.184.308/nvd
teampasswordmanager.com/docs/changelog/nvd
www.vulncheck.com/advisories/team-password-manager-before-14.184.308-authentication-bypass-in-password-resetnvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000