Skip to content
ThreatCluster

Critical Vulnerability in N-able Passportal Extensions Exposed

First seen 21 Aug 2026, 17:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 22, 2026 at 17:21 UTC
  • •CVE-2026-15580 has a CVSS score of 9.4, indicating critical severity.
  • •The vulnerability affects N-able Passportal browser extensions for Chrome and Edge.
  • •Organizations are urged to update to version 3.49.6 to mitigate risks.

A critical vulnerability in N-able Passportal’s browser extensions for Chrome and Microsoft Edge has been identified, allowing malicious websites or iframes to access an organization's password vault, including live two-factor authentication codes. This flaw, tracked as CVE-2026-15580, has a CVSS v4.0 base score of 9.4 and affects Passportal extension version 3.49.5. N-able has released an updated version, 3.49.6, to address this issue. Organizations using the affected version are at risk of credential theft and unauthorized access. The vulnerability was disclosed on August 21, 2026, and immediate action is required to mitigate potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 44d ago How this analysis works

Timeline

2026-08-21
CVE-2026-15580 published
A critical vulnerability in N-able Passportal extensions was disclosed, allowing unauthorized access to password vaults.
Cybersecuritynews
2026-08-21
Patch released
N-able released version 3.49.6 to address the critical vulnerability in Passportal extensions.
Gbhackers

More articles in this cluster (2)

Following this threat?

Track CVE-2026-15580 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 4