https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T19:42:16.828129+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-00265 bdu:2025-00265 2026-10-05T19:42:16.932020+00:00 bdu:2025-00265 https://cve.radiocsirt.org/vuln/drupal-contrib-2024-003 DRUPAL-CONTRIB-2024-003 2026-10-05T19:42:16.932076+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/tfa

This module enables you to allow and/or require users to use a second authentication method in addition to password authentication.

In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled.

This vulnerability is mitigated by the fact that an attacker must obtain a valid first-factor login credential, that an administrator must enable and then disable an authentication plugin, and that an attacker must obtain the valid second factor credential for the disabled plugin.

 https://cve.radiocsirt.org/vuln/euvd-2026-210056 EUVD-2026-210056 2026-10-05T19:42:16.932130+00:00 EUVD-2026-210056 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13239 fkie_cve-2024-13239 2026-10-05T19:42:16.932150+00:00

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

 https://cve.radiocsirt.org/vuln/ghsa-gqf5-wjqv-v83c GHSA-gqf5-wjqv-v83c 2026-10-05T19:42:16.932181+00:00

Weak Authentication vulnerability in Drupal Two-factor Authentication (TFA) allows Authentication Abuse.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.5.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0196 WID-SEC-W-2024-0196 — Drupal: Mehrere Schwachstellen 2026-10-05T19:42:16.932203+00:00

Ein anonymer Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.