CVE-2026-46419
Impersonation Vulnerability in Yubico WebAuthn Server Core 2.8.0–2.8.1
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products