CVSS 9.8 (critical) · published 2026-09-02
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.
Weakness: CWE-290
Source: NVD CVE-2026-19117
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.