Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the application does not properly clean or encode the information entered by the user in the username field. As a result, arbitrary JavaScript code is automatically executed in the administrator's browser when viewing failed login entries, resulting in a blind XSS condition.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-31 | 3 | Disclosure2General1 |
| 2026-05-20 | 1 | General1 |
Short Writeup on an ExifTool Arbitrary Command Execution Vulnerability that was reported two months back: CVE-2026-3106 https://securelist.com/exiftool-compromise-mac/119866/
Post summary
The article is a brief writeup on CVE-2026-3106, an arbitrary command execution vulnerability in ExifTool, with no details on PoC, exploitation, or patches.
⚠️ #INCIBEaviso | Múltiples vulnerabilidades en #Teampass #CVE CVE-2026-3106 y CVE-2026-3107 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-teampass #AvisosDeSeguridad #TI #CNA #0day
Post summary
The tweet references an INCIBE alert for two CVEs affecting Teampass, but provides no specifics on exploitation, patches, or PoC.
CVE-2026-3106 Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login for… https://www.cve.org/CVERecord?id=CVE-2026-3106
Post summary
CVE‑2026‑3106 is a blind XSS vulnerability in Teampass login, affecting versions prior to 3.1.5.16 through the 'contraseña' parameter.
🚨🚨🚨 CVE-2026-3106 CVE-2026-3107 Múltiples vulnerabilidades en Teampass | INCIBE-CERT https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-teampass
Post summary
INCIBE-CERT has issued an alert about multiple vulnerabilities in Teampass (CVE‑2026‑3106 and CVE‑2026‑3107), but the brief text does not provide details on PoC, exploitation, patches, or technical attributes.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | teampass | teampass | - | - | - |