https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 19:12:27 +0000 https://db.gcve.eu/vuln/cve-2026-55186 <p><strong>Affected:</strong> silverstripe-mfa</p> <p>Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user&#39;s configured multi-factor authentication challenge is completed. An attacker with access to the user&#39;s email account can follow the reset flow and bypass the additional authentication factor. CMS 6 is not affected. This issue is fixed in version 6.0.0.</p> <p><strong>Affected:</strong> silverstripe-mfa</p> <p>Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user&#39;s configured multi-factor authentication challenge is completed. An attacker with access to the user&#39;s email account can follow the reset flow and bypass the additional authentication factor. CMS 6 is not affected. This issue is fixed in version 6.0.0.</p> https://db.gcve.eu/vuln/cve-2026-55186