CVE-2026-46419
Published
CVSS v3
7.5
HIGH
CVSS v2
N/A
Affected
1
PROJECT
Description
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.
Server-side Web Authentication library for Java https://www.w3.org/TR/webauthn/#rp-operations
GitHub