CVE-2022-27240

CRITICAL 9.8CVE-2022-27240 · Published 18/03/2022 · updated 17/06/2026

In short

CVE-2022-27240 is a CRITICAL (CVSS 9.8) vulnerability affecting glewlwyd sso server (glewlwyd sso server project).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.3% of all vulnerabilities.
Fix: update to 2.6.2 or later.

Package	Affected versions	Patched versions
glewlwyd sso server glewlwyd_sso_server_project	`≥ 2.0.0, < 2.6.2`	`2.6.2`

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.