https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:06:21.307418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-061 DRUPAL-CONTRIB-2025-061 2026-10-02T22:06:21.312469+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/one_time_password

This module enables you to allow users to include a second authentication method in addition to password authentication.

The module doesn't sufficiently prevent one time login links from bypassing TFA.

This vulnerability is mitigated by the fact that an attacker must have access to an email account attached to a user or a valid one time password link for a user.

 https://cve.radiocsirt.org/vuln/euvd-2026-240687 EUVD-2026-240687 2026-10-02T22:06:21.312549+00:00 EUVD-2026-240687 https://cve.radiocsirt.org/vuln/fkie_cve-2025-48010 fkie_cve-2025-48010 2026-10-02T22:06:21.312567+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

 https://cve.radiocsirt.org/vuln/ghsa-fj3h-m99f-v4q3 GHSA-fj3h-m99f-v4q3 2026-10-02T22:06:21.312590+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal One Time Password allows Functionality Bypass.This issue affects One Time Password: from 0.0.0 before 1.3.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1065 WID-SEC-W-2025-1065 — Drupal Extensions: Mehrere Schwachstellen 2026-10-02T22:06:21.312604+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Erweiterungen ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen und andere nicht spezifizierte Angriffe durchzuführen.