Is CVE-2026-65710 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-65710 being exploited in the wild.

How severe is CVE-2026-65710?

High severity, with a CVSS score of 7.1, published 24 July 2026.

Is there a fix for CVE-2026-65710?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-65710 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-65710?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-65710: nuxsmin sysPass missing authorization in PublicLinkController

CVE-2026-65710 · Severity: high · CVSS 7.1 · Published 2026-07-24

sysPass is a password management system used by organizations to securely store and share credentials. A security flaw allows an authorized user to bypass access controls and generate a public sharing link for any password in the system, even those they are not permitted to see. If the attacker can obtain the resulting link, they can view sensitive administrative or corporate passwords in cleartext, potentially leading to a full breach of other systems.

Quick answers

Is CVE-2026-65710 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-65710 being exploited in the wild.
How severe is CVE-2026-65710?: High severity, with a CVSS score of 7.1, published 24 July 2026.
Which products and versions are affected?: nuxsmin sysPass <= 3.2.11.
Is there a fix for CVE-2026-65710?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-65710 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-65710?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authorization check (CWE-639/CWE-284) exists in the PublicLinkController of sysPass through version 3.2.11. While the application verifies if a user has the 'PUBLICLINK_CREATE' permission, it fails to perform AccountAcl or AccountFilterUser checks on the specific account being shared. An authenticated attacker can invoke the 'saveCreateFromAccountAction' endpoint with an arbitrary 'accountId' to force the 'AccountService::getDataForLink' method to load and decrypt credentials using the session's master key. The decrypted password is then serialized into the PublicLink database row. If the attacker can recover the generated link hash (via logs, notifications, or other information leaks), they can achieve unauthenticated cleartext password disclosure.

Affected products

nuxsmin sysPass <= 3.2.11

Timeline

2026-07-24: disclosed
2026-07-24: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.