CVE-2026-40947

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 17, 2026

Last Seen

April 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Yubico Software Vulnerability Allows Code Injection via DLL Path Flaw64.5

A security vulnerability affecting YubiKey Manager, libfido2, and python-fido2 has been identified, allowing attackers to execute injected code on Windows systems. The flaw arises from improper DLL path handling, specifically the use of LoadLibrary(TEXT('DLL_NAME')), which does not restrict paths to...