Security Advisory
CVE-2026-19117
9.8
CRITICAL
Vulnerability Description
Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as
that user. This issue affects on-premises deployments only.
Published Date
September 2, 2026
Official Source
NIST NVD Advisory