https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T17:25:36.566409+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/drupal-contrib-2026-201 DRUPAL-CONTRIB-2026-201 2026-10-31T17:25:36.601586+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/auth_login_plus

This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.

The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.

 https://db.gcve.eu/vuln/fkie_cve-2026-107261 fkie_cve-2026-107261 2026-10-31T17:25:36.601709+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

 https://db.gcve.eu/vuln/ghsa-4r22-vvmj-7r8j GHSA-4r22-vvmj-7r8j 2026-10-31T17:25:36.601753+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.