https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 10:30:38 +0000 https://db.gcve.eu/vuln/cve-2026-109313 <p><strong>Affected:</strong> getgrav grav-plugin-login</p> <p>Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.</p> <p><strong>Affected:</strong> getgrav grav-plugin-login</p> <p>Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember-me cookie restoration. Attackers can obtain a persistent remember-me cookie after the password step and restore it as a fully authorized session without completing the second factor.</p> https://db.gcve.eu/vuln/cve-2026-109313