https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:25:50.452522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-085 DRUPAL-CONTRIB-2025-085 2026-10-04T20:25:50.455573+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/tfa

This module enables you to allow and/or require a second authentication method in addition to password authentication.

The module does not sufficiently ensure that users with enhanced privileges are prevented from viewing recovery codes of other users.

This vulnerability is mitigated by the fact that an attacker must have a role with the *Administer TFA for other users* permission.

 https://cve.radiocsirt.org/vuln/euvd-2026-247106 EUVD-2026-247106 2026-10-04T20:25:50.455623+00:00 EUVD-2026-247106 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7030 fkie_cve-2025-7030 2026-10-04T20:25:50.455640+00:00

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.

 https://cve.radiocsirt.org/vuln/ghsa-93j9-6whq-hmr3 GHSA-93j9-6whq-hmr3 2026-10-04T20:25:50.455663+00:00

Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Two-factor Authentication (TFA): from 0.0.0 before 1.11.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1451 WID-SEC-W-2025-1451 — Drupal: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-04T20:25:50.455678+00:00

Ein Angreifer kann mehrere Schwachstellen in Drupal ausnutzen, um Sicherheitsvorkehrungen zu umgehen.