โ† ุงู„ุนูˆุฏุฉ ู„ู„ุฌุฏูˆู„
CVE-2026-48064
CVE-2026-48064 - pam_usb: PAM_RHOST check skipped when deny_remote=false allows XDMCP authentication bypass
๐Ÿ“… 2026-05-27 23:16:40
๐Ÿ”ด Critical ๐Ÿ”ฅ No MITRE CVE High ICS/OT OT/ICS

๐Ÿ“‹ ุงู„ูˆุตู ุงู„ูƒุงู…ู„

CVE ID :CVE-2026-48064 Published : May 27, 2026, 8:16 p.m. | 12ย hours, 8ย minutes ago Description :pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.1, when a PAM service is configured with deny_remote=false in pam_usb (commonly done for display managers such as gdm-password or lightdm to bypass process/TTY heuristics for local sessions),

๐Ÿ’ป ุงู„ุฃู†ุธู…ุฉ ุงู„ู…ุชุฃุซุฑุฉ

pam_usb: PAM_RHOST check

โš ๏ธ ู†ูˆุน ุงู„ุชู‡ุฏูŠุฏ

ICS/OT

๐Ÿ”— CVE ID

CVE-2026-48064

๐Ÿ“ก ุงู„ู…ุตุฏุฑ

MITRE CVE High

โœ… ุงู„ุญู„ูˆู„ ูˆุงู„ุชุฎููŠู

Refer to CVE-2026-48064 NVD advisory

๐Ÿ”— ุงู„ู…ุตุฏุฑ ุงู„ุฃุตู„ูŠ โ† ๐Ÿ“˜ NVD โ† โšก CISA KEV โ†