CVE-2026-19117
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Sep 02, 2026
Vendor
unknown
Description
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.