https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T05:39:14.669631+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-009 DRUPAL-CONTRIB-2025-009 2026-10-05T05:39:14.730168+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/alogin

This module allows a site to setup two factor authentication via QR code using authenticator applications on mobile devices including phones.

The module does not properly protect its custom paths, allowing one user to access a different user's two factor configuration.

 https://cve.radiocsirt.org/vuln/euvd-2026-235685 EUVD-2026-235685 2026-10-05T05:39:14.730229+00:00 EUVD-2026-235685 https://cve.radiocsirt.org/vuln/fkie_cve-2025-31681 fkie_cve-2025-31681 2026-10-05T05:39:14.730245+00:00

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6.

 https://cve.radiocsirt.org/vuln/ghsa-jwpx-6c4p-q4jq GHSA-jwpx-6c4p-q4jq — Drupal Authenticator Login Missing Authorization vulnerability 2026-10-05T05:39:14.730270+00:00

Affected: Packagist: drupal/alogin

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing. This issue affects Authenticator Login: from 0.0.0 before 2.0.6.