CVE-2024-26362

—

CVSS 3.1

8.8 high

EPSS

<1%p45

Published

Apr 10, 2024 (Apr 10, 2024)

Modified

Jun 17, 2026

Description

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to run arbitrary HTML code via creation of crafted note.

Vendors: enpass
Products: password manager
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.