CVE-2026-2414: Hypr

Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Authorization bypass through User-Controlled key vulnerability in HYPR Server allows Privilege Escalation.This issue affects Server: from 9.5.2 before 10.7.2.

Affected products

• Hypr Hypr: from 9.5.2, before 10.7.2 (fixed in 10.7.2)

Published 2026-03-25. Last modified 2026-06-17.