CVE-2026-82466

creationtimestamp| type| source ---|---|--- 2026-08-29 18:07:33+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muahsqbnaa2p 2026-08-29 22:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muax22qogc2u 2026-08-30 04:00:32+00:00| seen|...

DEBIAN-CVE-2026-82466

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...