QSearchQSearch

CVE-2026-47273

6.5 MEDIUM

pam_usb provides hardware authentication for Linux using ordinary removable media

Published: 2026-05-27 · Last updated: 2026-05-28

Severity and scoring

CVSS
6.5 MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
CWE
CWE-91

Description

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, pam_usb builds XPath expressions from user-supplied identifiers (PAM username, service name) and device-supplied identifiers (USB device serial, model, vendor) to query /etc/pamusb.conf. These identifiers were not validated for XPath metacharacters, allowing injection of arbitrary XPath predicates. This vulnerability is fixed in 0.9.0.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-46490 — samlify is a Node.js library for SAML single sign-on (8.8 HIGH)
  • CVE-2026-11169 — Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML... (8.1 HIGH)
  • CVE-2026-40165 — authentik is an open-source identity provider (8.7 HIGH)
  • CVE-2026-44665 — fast-xml-builder builds XML from JSON (6.1 MEDIUM)