CVE-2026-46419
High · 7.5CVSS
7.5
EPSS
0.4%
Published
May 14, 2026
CISA due date
—
The record
Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-15686 Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution… CWE-253
- CVE-2026-59847 A flaw was found in libssh. CWE-253
- CVE-2026-5818 Incorrect check of function return value in Caliptra Core Runtime Firmware… CWE-253
- CVE-2026-43863 mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c. CWE-253
- GHSA-88ch-q68x-36v7 uutils coreutils has an Incorrect Check of Function Return Value CWE-253
- GHSA-vp6q-mv9j-j428 uutils coreutils incorrectly handles exit codes when processing multiple files CWE-253
- CVE-2026-35340 A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities… CWE-253
- CVE-2026-35339 The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit… CWE-253