https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 23:36:56 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-107147 <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user&#39;s password can spoof a whitelisted IP address, resulting in the second factor being bypassed.</p> <p>This issue was fixed in commit 4640889.</p> <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user&#39;s password can spoof a whitelisted IP address, resulting in the second factor being bypassed.</p> <p>This issue was fixed in commit 4640889.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107147 https://db.gcve.eu/vuln/ghsa-f37x-h4hh-7q49 <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user&#39;s password can spoof a whitelisted IP address, resulting in the second factor being bypassed.</p> <p>This issue was fixed in commit 4640889.</p> <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user&#39;s password can spoof a whitelisted IP address, resulting in the second factor being bypassed.</p> <p>This issue was fixed in commit 4640889.</p> https://db.gcve.eu/vuln/ghsa-f37x-h4hh-7q49