CVE-2025-26788

Summary

CVE-2025-26788 is a vulnerability affecting StrongKey FIDO Servers prior to version 4.15.1. Despite being configured for non-discoverable transactions in the namedcredential flow, these servers incorrectly process such flows as discoverable transactions. This misconfiguration could potentially allow an attacker to obtain sensitive information, compromising the security of the authentication process. Users are advised to upgrade to version 4.15.1 or contact the vendor for a patch to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.