By weakness (CWE)

CWE-454: related vulnerabilities

CVEs classified under CWE-454. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-48980MEDIUM 6.3

  pam_usb is a Linux authentication module that uses removable hardware devices (like USB keys) as a second factor. In versions before 0.9.2, the module trusts environment variables—specifically XRDP_SESSION, DISPLAY, and TMUX—to determine whether a user is logging in locally or remotely. A local attacker can manipulate these variables to fool the module into thinking a remote session is actually local, bypassing the USB hardware check. This is dangerous because pam_usb runs as part of privileged operations like sudo and su, where environment variable pollution is a known attack vector.