AU
Product
authd
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add authd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9313 | 8.8 | Oct 3 | Authd PAM module before version 0.3.5 can allow broker-managed users to impersonate any other user managed by the same broker and perform any PAM operation with it, including… Affected: before 0.3.5 |
| CVE-2025-5689 | 8.5 | Jun 16 | A flaw was found in the temporary user record that authd uses in the pre-auth NSS Affected: before 0.5.4 |
| CVE-2026-6970 | 7.3 | Apr 27 | authd Denial of Service and Local Privilege Escalation Affected: 0.6.0 before 0.6.4; 0.6.1 before 0.6.1ubuntu0.1 |
| CVE-2024-9312 | 6.4 | Oct 10 | Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions Affected: before 0.3.6 |
| CVE-2026-102631 | 5.9 | Oct 15 | authd: Account takeover via username fallback in identity matching after IdP email reassignment Affected: 0.1 before 0.7.1; 0.1 before 0.7.1~ubuntu24.04.1; 0.1 before 0.7.1~ubuntu26.04 |
Showing 5