https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:18:01.975356+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-115 DRUPAL-CONTRIB-2025-115 2026-10-05T01:18:01.978548+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/email_tfa

The Email TFA module provides additional email-based two-factor authentication for Drupal logins.

In certain scenarios, the module does not fully protect all login mechanisms as expected.

This issue is mitigated by the fact that an attacker must already have valid user credentials (username and password) to take advantage of the weakness.

 https://cve.radiocsirt.org/vuln/euvd-2026-261233 EUVD-2026-261233 2026-10-05T01:18:01.978596+00:00 EUVD-2026-261233 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12760 fkie_cve-2025-12760 2026-10-05T01:18:01.978612+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-9jrw-jrrj-p6fr GHSA-9jrw-jrrj-p6fr — Drupal Email TFA allows Functionality Bypass 2026-10-05T01:18:01.978634+00:00

Affected: Packagist: drupal/email_tfa

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass. This issue affects Email TFA: from 0.0.0 before 2.0.6.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2501 WID-SEC-W-2025-2501 — Drupal Module (Email TFA und Simple multi step form): Mehrere Schwachstellen 2026-10-05T01:18:01.978654+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Cross-Site Scripting Angriff durchzuführen.