https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:17:58 +0000 https://cve.radiocsirt.org/vuln/drupal-contrib-2025-115 <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/email_tfa</p> <p>The Email TFA module provides additional email-based two-factor authentication for Drupal logins.</p> <p>In certain scenarios, the module does not fully protect all login mechanisms as expected.</p> <p>This issue is mitigated by the fact that an attacker must already have valid user credentials (username and password) to take advantage of the weakness.</p> <p><strong>Affected:</strong> Packagist:https://packages.drupal.org/8: drupal/email_tfa</p> <p>The Email TFA module provides additional email-based two-factor authentication for Drupal logins.</p> <p>In certain scenarios, the module does not fully protect all login mechanisms as expected.</p> <p>This issue is mitigated by the fact that an attacker must already have valid user credentials (username and password) to take advantage of the weakness.</p> https://cve.radiocsirt.org/vuln/drupal-contrib-2025-115 https://cve.radiocsirt.org/vuln/euvd-2026-261233 EUVD-2026-261233 https://cve.radiocsirt.org/vuln/euvd-2026-261233 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12760 <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12760 https://cve.radiocsirt.org/vuln/ghsa-9jrw-jrrj-p6fr <p><strong>Affected:</strong> Packagist: drupal/email_tfa</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass. This issue affects Email TFA: from 0.0.0 before 2.0.6.</p> <p><strong>Affected:</strong> Packagist: drupal/email_tfa</p> <p>Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass. This issue affects Email TFA: from 0.0.0 before 2.0.6.</p> https://cve.radiocsirt.org/vuln/ghsa-9jrw-jrrj-p6fr https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2501 <p>Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Drupal Module ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2501