Yubico
30 CVEs across 59 Yubico products. Browse Yubico vulnerabilities, severities, and proof-of-concept exploits.
Yubico products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-46419 | High | 7.5 | 2026-05-14 | Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to im… |
CVE-2026-40947 | Low | 2.9 | 2026-04-16 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path. |
CVE-2025-29991 | Low | 2.2 | 2025-04-03 | Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/… |
CVE-2025-23013 | | 2025-01-15 | In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be dep… | |
CVE-2024-45678 | Medium | 4.2 | 2024-09-03 | Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that r… |
CVE-2023-39908 | High | 7.5 | 2023-08-14 | The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. This may lead to d… |
CVE-2022-24584 | Medium | 6.5 | 2022-05-11 | Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico OTP supposedly crea… |
CVE-2015-3298 | High | 8.8 | 2022-03-30 | Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first powered up, a signature will be issued even though the PIN has no… |
CVE-2021-43399 | High | 7.5 | 2021-12-08 | The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH sign… |
CVE-2021-31924 | Medium | 6.8 | 2021-05-26 | Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This iss… |
CVE-2021-32489 | Medium | 4.4 | 2021-05-10 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length… |
CVE-2021-28484 | High | 7.5 | 2021-04-14 | An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not va… |
CVE-2021-27217 | Medium | 4.4 | 2021-03-04 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length… |
CVE-2021-3011 | Medium | 4.2 | 2021-01-07 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with C… |
CVE-2020-24388 | High | 7.5 | 2020-10-19 | An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2. The function does not validate the embedded length field of a messag… |
CVE-2020-24387 | High | 7.5 | 2020-10-19 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2. The function does not explicitly check the returned session id from… |
CVE-2020-15001 | Medium | 5.3 | 2020-07-09 | An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access… |
CVE-2020-15000 | Medium | 5.9 | 2020-07-09 | A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset… |
CVE-2020-13132 | Medium | 4.6 | 2020-07-09 | An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c th… |
CVE-2020-13131 | Medium | 4.3 | 2020-07-09 | An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded len… |
CVE-2020-10185 | High | 8.6 | 2020-03-05 | The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outsid… |
CVE-2020-10184 | High | 7.5 | 2020-03-05 | The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of servi… |
CVE-2011-4120 | Critical | 9.8 | 2019-11-26 | Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'suffi… |
CVE-2019-12210 | High | 8.1 | 2019-06-04 | In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process… |
CVE-2019-12209 | High | 7.5 | 2019-06-04 | Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not… |
CVE-2018-20340 | Medium | 6.8 | 2019-03-21 | Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to… |
CVE-2019-9578 | High | 7.5 | 2019-03-05 | In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device. |
CVE-2018-14780 | Medium | 4.6 | 2018-08-15 | An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `_ykpiv_f… |
CVE-2018-14779 | Medium | 6.8 | 2018-08-15 | A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver. The file lib/ykpiv.c contains the following code in the function `ykpiv_transf… |
CVE-2018-9275 | High | 8.2 | 2018-04-04 | In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file… |