CVE Intelligence

Yubico vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Yubico products: 2 record(s), with severity, exploitation and fixes.

Webauthn-server-core 1Libfido2 1Python-fido2 1Yubikey-manager 1

Exploited only (KEV) →

CVE-2026-46419 High · 7.5 CWE-253 May 13, 2026
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly…
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.
CVE-2026-40947 Low · 2.9 CWE-426 Apr 15, 2026
Untrusted Search Path in Yubico Libfido2
Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.