# Mcdope vulnerabilities Source: https://junglewise.ai/threats/vendors/mcdope Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mcdope.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 24 vulnerabilities in Mcdope: 2 in the last 7 days and 2 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-64667, was published on 11 November 2026. Nothing was published in the last eight weeks. 1 technology has a page of its own. ## Counts - Last 7 days: 2 - Last 30 days: 2 - Last 90 days: 2 - All time: 24 (0 critical, 0 exploited in the wild) ## About Mcdope An open-source software developer on GitHub. ## Latest Mcdope vulnerabilities - [CVE-2026-64667: pam_usb heap out-of-bounds read in display server handling](https://junglewise.ai/threats/cve-2026-64667-pam-usb-provides-hardware-authentication-for-linux-using) (medium, CVSS 4.4, published 11 Nov 2026) - [CVE-2026-64666: pam_usb XRDP session bypass via environment variable](https://junglewise.ai/threats/cve-2026-64666-pam-usb-provides-hardware-authentication-for-linux-using) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-48983: mcdope pam_usb symlink race condition in pad directory creation](https://junglewise.ai/threats/cve-2026-48983-mcdope-pam-usb-symlink-race-condition-in-pad-directory-creation) (medium, CVSS 5.8, published 18 Jun 2026) - [CVE-2026-48982: mcdope pam_usb race condition in one-time pad update](https://junglewise.ai/threats/cve-2026-48982-mcdope-pam-usb-race-condition-in-one-time-pad-update) (medium, CVSS 5.8, published 18 Jun 2026) - [CVE-2026-48981: mcdope pam_usb XXE in configuration file parsing](https://junglewise.ai/threats/cve-2026-48981-mcdope-pam-usb-xxe-in-configuration-file-parsing) (medium, CVSS 6.7, published 18 Jun 2026) - [CVE-2026-48980: mcdope pam_usb environment variable injection in local-check logic](https://junglewise.ai/threats/cve-2026-48980-mcdope-pam-usb-environment-variable-injection-in-local-check) (medium, CVSS 6.3, published 18 Jun 2026) - [CVE-2026-48986: mcdope pam_usb infinite loop DoS in process-tree walk](https://junglewise.ai/threats/cve-2026-48986-mcdope-pam-usb-infinite-loop-dos-in-process-tree-walk) (medium, CVSS 4.7, published 18 Jun 2026) - [CVE-2026-48985: mcdope pam_usb NULL pointer dereference in pusb_is_loginctl_local](https://junglewise.ai/threats/cve-2026-48985-mcdope-pam-usb-null-pointer-dereference-in-pusb-is-loginctl-local) (medium, CVSS 5.5, published 18 Jun 2026) - [CVE-2026-48984: mcdope pam_usb sensitive information disclosure in xfree helper](https://junglewise.ai/threats/cve-2026-48984-mcdope-pam-usb-sensitive-information-disclosure-in-xfree-helper) (medium, CVSS 4.7, published 18 Jun 2026) - [CVE-2026-47270: pam_usb race condition in remote session detection](https://junglewise.ai/threats/cve-2026-47270-pam-usb-race-condition-in-remote-session-detection) (medium, CVSS 6.3, published 27 May 2026) - [CVE-2026-47269: mcdope pam_usb access control bypass in deny_remote](https://junglewise.ai/threats/cve-2026-47269-mcdope-pam-usb-access-control-bypass-in-deny-remote) (high, CVSS 7.4, published 27 May 2026) - [CVE-2026-44713: mcdope pam_usb command injection in tmux.c](https://junglewise.ai/threats/cve-2026-44713-mcdope-pam-usb-command-injection-in-tmux-c) (high, CVSS 8.8, published 27 May 2026) - [CVE-2026-44712: mcdope pam_usb command injection in pamusb-conf and pamusb-agent](https://junglewise.ai/threats/cve-2026-44712-mcdope-pam-usb-command-injection-in-pamusb-conf-and-pamusb-agent) (high, CVSS 8.2, published 27 May 2026) - [CVE-2026-44711: mcdope pam_usb authentication bypass and file corruption via symlink attack](https://junglewise.ai/threats/cve-2026-44711-mcdope-pam-usb-authentication-bypass-and-file-corruption-via) (high, CVSS 7.9, published 27 May 2026) - [CVE-2026-44710: pam_usb NULL pointer dereference in device enumeration](https://junglewise.ai/threats/cve-2026-44710-pam-usb-null-pointer-dereference-in-device-enumeration) (medium, CVSS 4.6, published 27 May 2026) - [CVE-2026-44709: pam_usb command injection in pamusb-pinentry](https://junglewise.ai/threats/cve-2026-44709-pam-usb-command-injection-in-pamusb-pinentry) (high, CVSS 7.8, published 27 May 2026) - [CVE-2026-48792: mcdope pam_usb protection mechanism failure in virtual device detection](https://junglewise.ai/threats/cve-2026-48792-mcdope-pam-usb-protection-mechanism-failure-in-virtual-device) (medium, CVSS 4.4, published 27 May 2026) - [CVE-2026-48066: mcdope pam_usb race condition in log.c](https://junglewise.ai/threats/cve-2026-48066-mcdope-pam-usb-race-condition-in-log-c) (medium, CVSS 5.7, published 27 May 2026) - [CVE-2026-48065: mcdope pam_usb heap overflow in conf.c on 32-bit systems](https://junglewise.ai/threats/cve-2026-48065-mcdope-pam-usb-heap-overflow-in-conf-c-on-32-bit-systems) (medium, CVSS 6.7, published 27 May 2026) - [CVE-2026-48064: mcdope pam_usb incorrect authorization in remote host check](https://junglewise.ai/threats/cve-2026-48064-mcdope-pam-usb-incorrect-authorization-in-remote-host-check) (high, CVSS 8.1, published 27 May 2026) - [CVE-2026-47274: mcdope pam_usb uncontrolled search path in helper tools](https://junglewise.ai/threats/cve-2026-47274-mcdope-pam-usb-uncontrolled-search-path-in-helper-tools) (medium, CVSS 6.3, published 27 May 2026) - [CVE-2026-47273: mcdope pam_usb XPath injection in configuration queries](https://junglewise.ai/threats/cve-2026-47273-mcdope-pam-usb-xpath-injection-in-configuration-queries) (medium, CVSS 6.5, published 27 May 2026) - [CVE-2026-47272: pam_usb authentication bypass in pusb_pad_compare](https://junglewise.ai/threats/cve-2026-47272-pam-usb-authentication-bypass-in-pusb-pad-compare) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-47271: mcdope pam_usb NULL pointer dereference in src/mem.c](https://junglewise.ai/threats/cve-2026-47271-mcdope-pam-usb-null-pointer-dereference-in-src-mem-c) (medium, CVSS 5.1, published 27 May 2026) ## Most severe Mcdope vulnerabilities - [CVE-2026-44713: mcdope pam_usb command injection in tmux.c](https://junglewise.ai/threats/cve-2026-44713-mcdope-pam-usb-command-injection-in-tmux-c) (high, CVSS 8.8, published 27 May 2026) - [CVE-2026-44712: mcdope pam_usb command injection in pamusb-conf and pamusb-agent](https://junglewise.ai/threats/cve-2026-44712-mcdope-pam-usb-command-injection-in-pamusb-conf-and-pamusb-agent) (high, CVSS 8.2, published 27 May 2026) - [CVE-2026-48064: mcdope pam_usb incorrect authorization in remote host check](https://junglewise.ai/threats/cve-2026-48064-mcdope-pam-usb-incorrect-authorization-in-remote-host-check) (high, CVSS 8.1, published 27 May 2026) - [CVE-2026-44711: mcdope pam_usb authentication bypass and file corruption via symlink attack](https://junglewise.ai/threats/cve-2026-44711-mcdope-pam-usb-authentication-bypass-and-file-corruption-via) (high, CVSS 7.9, published 27 May 2026) - [CVE-2026-44709: pam_usb command injection in pamusb-pinentry](https://junglewise.ai/threats/cve-2026-44709-pam-usb-command-injection-in-pamusb-pinentry) (high, CVSS 7.8, published 27 May 2026) - [CVE-2026-47269: mcdope pam_usb access control bypass in deny_remote](https://junglewise.ai/threats/cve-2026-47269-mcdope-pam-usb-access-control-bypass-in-deny-remote) (high, CVSS 7.4, published 27 May 2026) - [CVE-2026-64666: pam_usb XRDP session bypass via environment variable](https://junglewise.ai/threats/cve-2026-64666-pam-usb-provides-hardware-authentication-for-linux-using) (high, CVSS 7.1, published 11 Nov 2026) - [CVE-2026-47272: pam_usb authentication bypass in pusb_pad_compare](https://junglewise.ai/threats/cve-2026-47272-pam-usb-authentication-bypass-in-pusb-pad-compare) (high, CVSS 7.1, published 27 May 2026) - [CVE-2026-48981: mcdope pam_usb XXE in configuration file parsing](https://junglewise.ai/threats/cve-2026-48981-mcdope-pam-usb-xxe-in-configuration-file-parsing) (medium, CVSS 6.7, published 18 Jun 2026) - [CVE-2026-48065: mcdope pam_usb heap overflow in conf.c on 32-bit systems](https://junglewise.ai/threats/cve-2026-48065-mcdope-pam-usb-heap-overflow-in-conf-c-on-32-bit-systems) (medium, CVSS 6.7, published 27 May 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 2 | 0 | 0 | ## Mcdope technologies - [Mcdope Pam Usb](https://junglewise.ai/threats/technologies/pam-usb): 24 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Mcdope vulnerabilities", https://junglewise.ai/threats/vendors/mcdope, 12 November 2026.