01 Record

CVE-2026-62382

PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison

MediumPUBLISHEDCNA: VulnCheck

Base score6.9 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

02 Description

PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison

Published

2026-08-22 12:26Z2 HR AGO

Last updated

2026-08-22 12:26Z2 HR AGO

Reserved

2026-07-13

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

Medium (CVSS 6.9)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

487cabdf0c24715ea3eb66744040894a3dfa9e8d0c4509e1533b24b7e59aabd4

VendorProductVersionsPlatforms

pglombardoPasswordPusher0 to < 2.9.6—

github.comGitHub Security Advisory (GHSA-jf2m-hpj9-4qx2)https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-jf2m-hpj9-4qx2vendor-advisory
www.vulncheck.comVulnCheck Advisory: PasswordPusher before v2.9.6 Authentication Bypass via Null Comparisonhttps://www.vulncheck.com/advisories/passwordpusher-before-authentication-bypass-via-null-comparisonthird-party-advisory