CVE-2026-84699Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset local account passwords and authenticate as those users to gain unauthorized access.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-640

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 3 classified signals
General: 2 classified signals
Peaked 2d ago at 3 mentions (2026-09-02); latest day: 1
5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

360.0%

General

240.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-02	3	Disclosure2General1
2026-09-03	1	General1
2026-09-10	1	Disclosure1

Full discourse5 posts

Cybersecurity News DE@cybsecuritynews37d
Disclosure
#schwachstellen CVE-2026-84699: Team Password Manager lässt Passwort-Resets ohne Authentifizierung zu #cve202684699 #nvd #teampasswordmanager https://cybersecurity-news.de/cve-2026-84699-team-password-manager-authentifizierung-passwort-reset
Post summary
The article announces CVE-2026-84699, revealing that Team Password Manager allows unauthenticated password resets.
0000034
12 followersView on X
Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs44d
General
CVE-2026-84699 Team Password Manager Password-recovery flaws could let unauthenticated attackers reset local account passwords and take over credential-vault sessions Full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-09-02/TIER_2_CVE-2026-84699.md #CyberSecurity #IdentitySecurity #VulnerabilityManagement
Post summary
The report describes CVE-2026-84699 as a password‑recovery flaw in Team Password Manager that allows unauthenticated password resets and session takeover, but offers no PoC, exploit, or patch details.
0000036
61 followersView on X
CVE@CVEnew45d
Disclosure
CVE-2026-84699 Team Password Manager before 14.184.308 fails to enforce authentication requirements in the local account password reset flow. Unauthenticated attackers can reset loc… https://www.cve.org/CVERecord?id=CVE-2026-84699
Post summary
The post reports CVE-2026-84699, noting that Team Password Manager lacks authentication enforcement in its local account password reset flow, enabling unauthenticated password resets; it provides no PoC, exploit, patch, or active exploitation details.
00000775
58.0K followersView on X
SystemTek - Technology news website@SystemTek_UK45d
General
Critical Team Password Manager Vulnerability Allows Account Takeover (CVE-2026-84699) https://www.systemtek.co.uk/2026/09/critical-team-password-manager-vulnerability-allows-account-takeover-cve-2026-84699/ via @SystemTek_UK
Post summary
A new CVE‑2026‑84699 affecting Critical Team Password Manager is reported, citing a vulnerability that permits account takeover, with limited details provided.
0000048
1.8K followersView on X
ThreatAft@ThreatAft45d
Disclosure
🚨 Team Password Manager — CVSS 9.1 CRITICAL CVE-2026-84699: Unauthenticated local account password reset → https://threataft.com/articles/team-password-manager-cve-2026-84699 #cybersecurity #infosec #PasswordManager #TeamPasswordManager #AuthBypass #CVSS9 #PatchNow #ThreatIntel
Post summary
A new critical vulnerability (CVE‑2026‑84699) is disclosed in Team Password Manager, enabling unauthenticated local account password reset with CVSS 9.1, and a patch is urgently recommended.
0000059
39 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-84699

Cybersecurity News DE@cybsecuritynewsDisclosure

The article announces CVE-2026-84699, revealing that Team Password Manager allows unauthenticated password resets.

Cyber Threat Observatory | Alan Turing Institute@TuringCyberObsGeneral

The report describes CVE-2026-84699 as a password‑recovery flaw in Team Password Manager that allows unauthenticated password resets and session takeover, but offers no PoC, exploit, or patch details.

CVE@CVEnewDisclosure

The post reports CVE-2026-84699, noting that Team Password Manager lacks authentication enforcement in its local account password reset flow, enabling unauthenticated password resets; it provides no PoC, exploit, patch, or active exploitation details.

SystemTek - Technology news website@SystemTek_UKGeneral

A new CVE‑2026‑84699 affecting Critical Team Password Manager is reported, citing a vulnerability that permits account takeover, with limited details provided.

ThreatAft@ThreatAftDisclosure

A new critical vulnerability (CVE‑2026‑84699) is disclosed in Team Password Manager, enabling unauthenticated local account password reset with CVSS 9.1, and a patch is urgently recommended.