https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T16:05:31.685432+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2025-098 DRUPAL-CONTRIB-2025-098 2026-10-04T16:05:31.688579+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/alogin

This module allows users to setup two-factor authentication (2FA) using authenticator apps for enhanced login security.

The module did not protect all possible login paths provided by core modules.

**CVSS risk score ([experimental](https://www.drupal.org/project/securitydrupalorg/issues/3442181)) 6.3 / Medium**

[CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N](https://www.first.org/cvss/calculator/4-0#CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N)

 https://cve.radiocsirt.org/vuln/euvd-2026-255138 EUVD-2026-255138 2026-10-04T16:05:31.688629+00:00 EUVD-2026-255138 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8093 fkie_cve-2025-8093 2026-10-04T16:05:31.688645+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.

 https://cve.radiocsirt.org/vuln/ghsa-pjrr-5qr2-gxw3 GHSA-pjrr-5qr2-gxw3 2026-10-04T16:05:31.688667+00:00

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1918 WID-SEC-W-2025-1918 — Drupal Extensions: Mehrere Schwachstellen 2026-10-04T16:05:31.688682+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.