CVE-2022-26980

Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO.

• CWE-79

• https://gist.github.com/RNPG/6919286e0daebce7634d0a744e060dcaExploit, Third Party Advisory
• https://github.com/nilsteampassnet/TeamPass/commits/teampass_2Patch, Third Party Advisory
• https://gist.github.com/RNPG/6919286e0daebce7634d0a744e060dcaExploit, Third Party Advisory
• https://github.com/nilsteampassnet/TeamPass/commits/teampass_2Patch, Third Party Advisory

Published

Mar 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26975Barco Control Room Management Suite web application, which i…7.5
• CVE-2022-26976Barco Control Room Management Suite web application, which i…5.4
• CVE-2022-26977Barco Control Room Management Suite web application, which i…6.1
• CVE-2022-26978Barco Control Room Management Suite web application, which i…6.1
• CVE-2022-26979Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 …7.5
• CVE-2022-2698A vulnerability was found in SourceCodester Simple E-Learnin…9.8
• CVE-2022-26981Liblouis through 3.21.0 has a buffer overflow in compilePass…7.8
• CVE-2022-26982SimpleMachinesForum 2.1.1 and earlier allows remote authenti…7.2
• CVE-2022-26986SQL Injection in ImpressCMS 1.4.3 and earlier allows remote …7.2
• CVE-2022-26987TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and…7.8
• CVE-2022-26988TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and…7.8
• CVE-2022-2699A vulnerability was found in SourceCodester Simple E-Learnin…7.5