← Database

CVE-2026-46419

HIGH CVSS: 7.5 Published: 2026-05-14 Modified: 2026-06-17

Description

Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.

Affected Platforms

Unknown

Weakness Type

CWE-253

References