CVE-2026-48981 | mcdope pam_usb up to 0.9.1 on Linux XML pam_usb.conf xmlReadFile xml external entity reference (GHSA-96vv-r4wc-28c2)

June 19, 2026 Yanac

A vulnerability classified as problematic has been found in mcdope pam_usb up to 0.9.1 on Linux. Affected by this vulnerability is the function xmlReadFile of the file pam_usb.conf of the component XML Handler. Performing a manipulation results in xml external entity reference.

This vulnerability was named CVE-2026-48981. The attack needs to be approached locally. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More