CVE-2026-44711
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
31/100
Published: 2026-05-27
Modified: 2026-10-26
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
Required
S:
Changed
C:
None
I:
High
A:
High
Description
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass and root file corruption. This vulnerability is fixed in 0.8.7.