CVE-2023-39930: Pingidentity Pingid Radius Pcv

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.

Affected products

• Pingidentity Pingid Radius Pcv: from 3.0.0, before 3.0.3 (fixed in 3.0.3)

Published 2023-10-25. Last modified 2026-06-17.