https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:30:44.340624+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277219 EUVD-2026-277219 2026-10-08T11:30:44.343515+00:00 EUVD-2026-277219 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4208 fkie_cve-2026-4208 2026-10-08T11:30:44.343548+00:00

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.

 https://cve.radiocsirt.org/vuln/ghsa-29r8-gvx4-r9w3 GHSA-29r8-gvx4-r9w3 — Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email) 2026-10-08T11:30:44.343585+00:00

Affected: Packagist: ralffreit/mfa-email

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0753 WID-SEC-W-2026-0753 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-08T11:30:44.343610+00:00

Ein lokaler, oder ein enfernter authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.