CVE-2022-26980: Teampass

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO.

Affected products

• Teampass Teampass: version 2.1.26 only

Published 2022-03-28. Last modified 2026-06-17.