CVE-2025-26788

Description

StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.

Affected Platforms

Weakness Type

CWE-639

References

• https://docs.strongkey.com/index.php/skfs-v3/skfs-release-notes
• https://www.securing.pl/en/cve-2025-26788-passkey-authentication-bypass-in-stron…