Yubico webauthn-server-core aka java-webauthn-server 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation...
7.5CVSS5.8AI score0.00308EPSS
SaveExploits0References3Affected Software1
Cvelist•added 2026/05/14 12:0 a.m.•42 views
CVE-2026-46419
Yubico webauthn-server-core aka java-webauthn-server 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation...