As cited
Copy frozen at (site build).
vulnerabilities
Re: OATH Toolkit PSKC Signature Verification bypass in libpskc (CVE-2026-109117)
A signature verification bypass vulnerability was disclosed in the OATH Toolkit's libpskc library, identified as CVE-2026-109117. The flaw allows attackers to bypass cryptographic signature checks on PSKC (Portable Symmetric Key Container) files.
Why it matters: Organizations using the OATH Toolkit or libpskc to validate one-time password container signatures face the risk of accepting forged or tampered key material without detection; verification of whether systems are affected and patching is required.
- Source published
- First seen by Cybersecurity Tracker