CVE-2019-10884: Uniqkey Password Manager

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Uniqkey Password Manager 1.14 contains a vulnerability because it fails to recognize the difference between domains and sub-domains. The vulnerability means that passwords saved for example.com will be recommended for usersite.example.com. This could lead to successful phishing campaigns and create a sense of false security.

Affected products

• Uniqkey Password Manager: version 1.14 only

Published 2019-04-05. Last modified 2026-06-17.