Yubico vulnerabilities
4 published CVEs name Yubico among the affected products.
- Published CVEs
- 4
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 0Low 2Not scored 0
CVEs per yearBy the year they were published
- 20252
- 20262
Newest CVEs
- CVE-2026-46419
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to…
Yubico · webauthn-server-core
High7.5 - CVE-2026-40947
Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.
Yubico · libfido2
Low2.9 - CVE-2025-29991
Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP…
Yubico · YubiKey
Low2.2 - CVE-2025-23013
In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be…
Yubico · pam-u2f
High7.3