CVE-2025-26788CWE-639

StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction

High · published February 14, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-02-14T00:00Z
EPSS history
Timeline
  • 14 FEB 00:00Z
    StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction
    cvelistv5