CVE-2026-117470Published
WebAuthn assertion replay permits second-factor bypass in Psono Server
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-117470 · Microsoft / collected KEV context
cve-program · CVE-2026-117470
- https://gitlab.com/esaqa/esaqa/security-advisories/-/blob/master/advisories/CVE-2026-117470.md
- https://gitlab.com/esaqa/psono/psono-server/-/blob/v7.2.3/psono/restapi/serializers/webauthn_verify.py
- https://gitlab.com/esaqa/psono/psono-server/-/commit/9c9a7f1701535df63370340dcc80210737dc495d
- https://gitlab.com/esaqa/psono/psono-server/-/releases/v7.2.4
- https://gitlab.com/esaqa/psono/psono-server
Related operational evidence
Explicit CVE identifiers- WebAuthn assertion replay permits second-factor bypass in Psono Server · Newly collected advisory · 27 Oct 2026