https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:58:08.523672+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-359914 EUVD-2026-359914 2026-10-06T02:58:08.579129+00:00 EUVD-2026-359914 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77567 fkie_cve-2026-77567 2026-10-06T02:58:08.579168+00:00

Filament is a collection of full-stack components for accelerated Laravel development. Prior to versions 4.12.0 and 5.7.0, incorrect challenge-form required-field handling allows app-based multi-factor authentication to be bypassed when recovery codes are enabled. Email-based multi-factor authentication is not affected. This issue is fixed in versions 4.12.0 and 5.7.0.

 https://cve.radiocsirt.org/vuln/ghsa-52xp-w8hr-xv3c GHSA-52xp-w8hr-xv3c — Filament: Multi-factor authentication (app) can be bypassed when recovery codes are enabled 2026-10-06T02:58:08.579202+00:00

Affected: Packagist: filament/filament

A flaw in the challenge handling for app-based multi-factor authentication allows the second factor to be bypassed. This issue does not affect email-based MFA. It also only applies when recovery codes are enabled.