https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T04:03:36.361938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-67337 CVE-2026-67337 — better-auth before 1.4.9 Two-Factor Authentication Bypass via session.cookieCache 2026-10-09T04:03:36.376527+00:00

Affected: better-auth

better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials can access authenticated routes without completing second-factor verification by exploiting premature session caching.