Orta CVSS 4.8
CVE-2026-107254: CVE-2026-107254: kimlik doğrulama atlatma
Açıklama (NVD)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.
Özet bilgiler
- CVSS v3.1
- 4.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS
- %0,22 (yüzdelik 13)
- CWE
- CWE-288
- Yama
- Yok / bilinmiyor