Critical N

Cybersecuritynews •Abinaya • August 21, 2026

A critical vulnerability in N-able Passportal’s Chrome and Microsoft Edge browser extensions could allow a malicious website or embedded iframe to steal an organization’s entire password vault, including live two-factor authentication codes. Tracked as CVE-2026-15580, the issue received a CVSS v4.0 base score of 9.4 and affected Passportal extension version 3.49.5. N-able released version 3.49.6 […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in N-able Passportal Extensions Exposed A critical vulnerability in N-able Passportal’s browser extensions for Chrome and Microsoft Edge has been identified, allowing malicious websites or iframes to access an organization's password vault, including live two-factor authentication codes. This flaw, tracked as CVE-2026-15580, has a CVSS v4.0 base score of 9.4 and affects Passportal extension version 3.49.5. N-able has released an updated version, 3.49.6, to address this issue. Organizations using the affected version are at risk of credential theft and unauthorized access. The vulnerability was disclosed on August 21, 2026, and immediate action is required to mitigate potential exploitation. 2 sources 78

Extracted Entities

Critical N

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)

Tools (2)