Critical N

Gbhackers •Divya • August 21, 2026

Cybersecurity researchers have revealed a critical vulnerability in N-able’s PassPortal browser extension that could have allowed a malicious website or embedded iframe to obtain authentication materials and take control of a user’s password vault. This vulnerability, tracked as CVE-2026-15580, affects PassPortal version 3.49.5 and has a CVSS v4.0 base score of 9.4. It was patched […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in N-able Passportal Extensions Exposed A critical vulnerability in N-able Passportal’s browser extensions for Chrome and Microsoft Edge has been identified, allowing malicious websites or iframes to access an organization's password vault, including live two-factor authentication codes. This flaw, tracked as CVE-2026-15580, has a CVSS v4.0 base score of 9.4 and affects Passportal extension version 3.49.5. N-able has released an updated version, 3.49.6, to address this issue. Organizations using the affected version are at risk of credential theft and unauthorized access. The vulnerability was disclosed on August 21, 2026, and immediate action is required to mitigate potential exploitation. 2 sources 78

Extracted Entities

Critical N

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)