Most recent entries from all

DRUPAL-CONTRIB-2026-197

Affected: Packagist:https://packages.drupal.org/8: drupal/auth_login_plus

This module provides TOTP-based two-factor authentication (2FA) for Drupal.

The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link.

This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a victim's account.

fkie_cve-2026-107254

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

Most recent entries from all

DRUPAL-CONTRIB-2026-197

fkie_cve-2026-107254

GHSA-p825-6r72-qfr4