CVE-2026-107254
Authenticator Login Plus (2FA) - Critical - Improper authentication - SA-CONTRIB-2026-197
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.
| CWE | CWE-288 |
| Vendor | drupal |
| Product | authenticator login plus (2fa) |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal authenticator login plus (2fa)
Be the first to know when new unknown vulnerabilities affecting drupal authenticator login plus (2fa) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Authenticator Login Plus (2FA)
0.0.0 < 1.0.1
Credits
mouhamed rayen mansouri (w0nd3r) mugesh.s Swan Kalata (akalata) Juraj Nemec (poker10)