← CVE Intelligence

CVE-2026-40947

Yubico / libfido2 PUBLISHED

Description (CNA)

Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.

Affected (CNA)

Vendor / product	Versions
Yubico / libfido2	affected 0 before 1.17.0
Yubico / python-fido2	affected 0 before 2.2.0
Yubico / yubikey-manager	affected 0 before 5.9.1

CWE

CWE-426

References

https://www.yubico.com/support/security-advisories/ysa-2026-01/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.