Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 13:16:32 +0000 DRUPAL-CONTRIB-2026-201 https://db.gcve.eu/vuln/drupal-contrib-2026-201 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/auth_login_plus</p> <p>This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.</p> <p>The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/auth_login_plus</p> <p>This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.</p> <p>The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.</p> https://db.gcve.eu/vuln/drupal-contrib-2026-201 fkie_cve-2026-107261 https://db.gcve.eu/vuln/fkie_cve-2026-107261 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-107261 GHSA-4r22-vvmj-7r8j https://db.gcve.eu/vuln/ghsa-4r22-vvmj-7r8j <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.</p> https://db.gcve.eu/vuln/ghsa-4r22-vvmj-7r8j