https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 02:40:05 +0000 https://db.gcve.eu/vuln/cve-2026-107145 <p><strong>Affected:</strong> alexandregz twofactor_gauthenticator</p> <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user&#39;s password can submit arbitrary 6-digit codes, resulting in second-factor bypass and unauthorized access to the system.</p> <p>This issue was fixed in commit 4640889.</p> <p><strong>Affected:</strong> alexandregz twofactor_gauthenticator</p> <p>The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user&#39;s password can submit arbitrary 6-digit codes, resulting in second-factor bypass and unauthorized access to the system.</p> <p>This issue was fixed in commit 4640889.</p> https://db.gcve.eu/vuln/cve-2026-107145