Vulnerabilidades de Yubico

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Yubico: 2 registro(s), com severidade, exploração e correções.

Webauthn-server-core 1 Libfido2 1 Python-fido2 1 Yubikey-manager 1

Somente exploradas (KEV) →

CVE-2026-46419 Alta · 7.5 CWE-253 13/05/2026

Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly…

Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.

CVE-2026-40947 Baixa · 2.9 CWE-426 15/04/2026

Untrusted Search Path em Yubico Libfido2

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.