CVE-2026-2414

>= 9.5.2 and < 10.7.2

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Serve

9.8CRITICAL

CVE-2024-8273

< 10.1.0

Authentication Bypass by Spoofing vulnerability in HYPR Server allows Identity Spoofing.This issue affects Server: before 10.1.

8.8HIGH

CVE-2024-0068

< 8.7.1

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipul

5.5MEDIUM

CVE-2023-6336

< 8.7

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Control

7.2HIGH

CVE-2023-6335

< 8.7

Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Contr

6.4MEDIUM

CVE-2023-6334

< 8.7

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows O

5.3MEDIUM

CVE-2023-5097

< 8.7

Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Acc

7.0HIGH

CVE-2023-1837

< 8.0

Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This

8.5HIGH

CVE-2023-1477

< 7.10.2

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR

7.2HIGH

CVE-2023-0834

>= 6.12.0 and < 8.1.0

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.

7.0HIGH

CVE-2022-3258

< 7.7.1

Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abus

3.7LOW

CVE-2022-2193

< 6.14.1

Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a

7.5HIGH

CVE-2022-2192

>= 6.10 and <= 6.15.1

Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token t

7.5HIGH

CVE-2022-1984

< 7.3.0

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) be

4.5MEDIUM