CVE-2026-44711

—

CVSS 3.1

7.9 high

EPSS

<1%p6

Published

May 27, 2026 (May 27, 2026)

Modified

Jun 17, 2026

Description

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.

Weakness: CWE-59, CWE-287
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.