CPE
high
advisory
pam_usb: Authentication policy bypass via IPv6 (CVE-2026-64669)
1 TTP 1 CVEThe pam_usb module incorrectly evaluates remote tmux sessions due to a faulty IPv6 regex, allowing authentication when the deny_remote feature should be triggered.
pam_usb
1t
1c
high
advisory
pam_usb: Authentication bypass in deny_remote feature (CVE-2026-64668)
1 TTP 1 CVEThe pam_usb authentication module version 0.8.0 through 0.9.2 fails to correctly parse link-local IPv6 addresses with zone indices, leading to an authentication bypass in the deny_remote feature.
pam_usb
1t
1c