Skip to content
Linux-PAM CVE-2026-54411 Exposes Passwords via Timing Attack

Linux-PAM CVE-2026-54411 Exposes Passwords via Timing Attack

First seen 15 Jun 2026, 08:05 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 16, 2026 at 07:23 UTC
  • •CVE-2026-54411 affects Linux-PAM versions up to 1.7.2.
  • •The vulnerability allows attackers to exploit timing discrepancies to recover plaintext passwords.
  • •Mitigation requires proper configuration of pam_userdb to avoid storing credentials in plaintext.

A newly published CVE-2026-54411 details a vulnerability in Linux-PAM versions up to 1.7.2. The issue lies in the pam_userdb module's plaintext-password comparison, which has an observable timing discrepancy. This flaw allows local or network-adjacent attackers to recover plaintext passwords by measuring response timing differences during authentication attempts. The vulnerability occurs when pam_userdb is configured improperly, such as with 'crypt=none' or without a crypt method, leading to plaintext storage of credentials. The CVE was published on June 14, 2026, and poses a medium severity risk. Administrators are advised to review their configurations to mitigate this risk.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 97d ago How this analysis works

Timeline

2026-06-14
CVE-2026-54411 published
NVD published CVE-2026-54411 detailing a timing attack vulnerability in Linux-PAM.
nvd.nist.gov
2026-06-15
Vulnerability reported by The Hacker Wire
The Hacker Wire reported on CVE-2026-54411, emphasizing the risk of password exposure through timing attacks.
Thehackerwire

More articles in this cluster (4)

Following this threat?

Track CVE-2026-54411 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3