https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:20:25.614831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-056 DRUPAL-CONTRIB-2025-056 2026-10-07T00:20:25.681247+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/miniorange_2fa

The module enables you to add second-factor authentication in addition to the default Drupal login.

The module does not sufficiently ensure that known login routes are protected.

This vulnerability is mitigated by the fact that an attacker must obtain the user's username and password.

 https://cve.radiocsirt.org/vuln/euvd-2026-240002 EUVD-2026-240002 2026-10-07T00:20:25.681306+00:00 EUVD-2026-240002 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47710 fkie_cve-2025-47710 2026-10-07T00:20:25.681323+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

 https://cve.radiocsirt.org/vuln/ghsa-h8vr-q495-8mwj GHSA-h8vr-q495-8mwj 2026-10-07T00:20:25.681347+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0978 WID-SEC-W-2025-0978 — Drupal Erweiterungen: Mehrere Schwachstellen 2026-10-07T00:20:25.681363+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um Dateien zu manipulieren, Cross-Site-Scripting-Angriffe durchzuführen und Sicherheitsmaßnahmen zu umgehen.