https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:02:12.459661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-14221 EUVD-2026-14221 2026-10-10T18:02:12.464468+00:00 EUVD-2026-14221 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24584 fkie_cve-2022-24584 2026-10-10T18:02:12.464506+00:00

Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico OTP supposedly creates hardware bound second factor credentials. When a user reprograms the OTP functionality by "writing" it on a token using the Yubico Personalization Tool, they can then upload the new configuration to Yubicos OTP validation servers. NOTE: the vendor disputes this because there is no way for a YubiKey device to prevent a user from deciding that a secret value, which is imported into the device, should also be stored elsewhere

 https://cve.radiocsirt.org/vuln/ghsa-gwr3-p8fv-j5fg GHSA-gwr3-p8fv-j5fg 2026-10-10T18:02:12.464541+00:00

Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico OTP supposedly creates hardware bound second factor credentials. When a user reprograms the OTP functionality by "writing" it on a token using the Yubico Personalization Tool, they can then upload the new configuration to Yubicos OTP validation servers.

 https://cve.radiocsirt.org/vuln/gsd-2022-24584 gsd-2022-24584 2026-10-10T18:02:12.464560+00:00 gsd-2022-24584