Skip to contentYubico Yubikey vulnerabilities
- yubico libfido2, python-fido2, yubikey-manager +2 moreYubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have...CVE-2026-409472.9 Low
- yubico yubikeyYubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol...CVE-2025-299912.2 Low
- yubico security key c nfc by yubico firmware, security key nfc by yubico firmware, yubihsm 2 fips firmware +15 more +17 moreYubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware...CVE-2024-456784.2 Medium
- yubico yubikey manager guiykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows...CVE-2024-314988.8 High
- ftsafe k13, k21, k40 +42 more +44 moreAn electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security...CVE-2021-30114.2 Medium
- yubico yubikey 5 nfc firmwareAn information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5...CVE-2020-150015.3 Medium
- yubico yubikey 5 nfc firmwareA PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has...CVE-2020-150005.9 Medium
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect...CVE-2020-13132Fix available4.3 Medium
- yubico libykpiv, piv tool manager, yubikey smart card minidriver +2 moreAn issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is...CVE-2020-13131Fix available4.3 Medium
- yubico yubikey one time password validation serverThe verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL...CVE-2020-101847.5 High
- yubico yubikey one time password validation serverThe sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an...CVE-2020-101858.6 High