Drupal Authenticator Login Plus (2FA) vulnerabilities (CVE)

CVE records published for Drupal Authenticator Login Plus (2FA), newest first. Follow to get an email when a new one appears.

2 results

4.8Medium

CVE-2026-107254 14 days ago

Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197

Drupal Authenticator Login Plus (2FA)

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

4.2Medium

CVE-2026-107261 14 days ago

Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201

Drupal Authenticator Login Plus (2FA)