https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:22:23.775411+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-082 DRUPAL-CONTRIB-2025-082 2026-10-04T02:22:23.778593+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/miniorange_2fa

The module enables you to add second-factor authentication on top of the default Drupal login.

The module does not sufficiently ensure that known authorization routes are protected.

This vulnerability is mitigated by the fact that an attacker must obtain the user's username and password.

 https://cve.radiocsirt.org/vuln/euvd-2026-272604 EUVD-2026-272604 2026-10-04T02:22:23.778640+00:00 EUVD-2026-272604 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6675 fkie_cve-2025-6675 2026-10-04T02:22:23.778657+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0.*, from 0.0.0 before 5.1.*.

 https://cve.radiocsirt.org/vuln/ghsa-9c75-x9m5-346w GHSA-9c75-x9m5-346w 2026-10-04T02:22:23.778680+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0.*, from 0.0.0 before 5.1.*.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1404 WID-SEC-W-2025-1404 — Drupal Module: Mehrere Schwachstellen 2026-10-04T02:22:23.778695+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.