PT-2026-44088 · Pam Usb · Pam Usb

Mcdope · CVE-2026-48064 · Published 2026-05-27 · Updated 2026-05-27

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pam usb versions prior to 0.9.1

Description When a PAM service is configured with deny remote=false, the PAM RHOST check within the pusb do auth() function is skipped. PAM RHOST is a variable used by remote daemons, such as sshd or XDMCP servers, to identify the address of a remote client. Because this check is gated by the deny remote option, remote XDMCP connections can reach the USB device authentication stage instead of being rejected.

Recommendations Update to version 0.9.1.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-48064

GHSA-W38V-CW9R-X9P6

Affected Products

Pam Usb

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48064.json · Exploit
• 🔥 https://github.com/mcdope/pam_usb/issues/348 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-48064 · Security Note
• https://osv.dev/vulnerability/CVE-2026-48064 · Vendor Advisory
• https://github.com/mcdope/pam_usb/security/advisories/GHSA-w38v-cw9r-x9p6 · Note
• https://t.me/CVEtracker/55167 · Telegram Post