Yubico Webauthn-server-core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Yubico Webauthn-server-core: 1 record(s), with affected versions and fixes.

CVE-2026-46419 High · 7.5 CWE-253 May 13, 2026

Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly…

Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.