CVE-2026-107261
Authenticator Login Plus (2FA) - Moderately critical - Improper authentication - SA-CONTRIB-2026-201
CVSS Score
4.2
EPSS Score
0.2%
EPSS Percentile
9th
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.
| CWE | CWE-288 |
| Vendor | drupal |
| Product | authenticator login plus (2fa) |
| Ecosystems | |
| Industries | WebMedia |
| Published | Oct 30, 2026 |
| Last Updated | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for drupal authenticator login plus (2fa)
Be the first to know when new medium vulnerabilities affecting drupal authenticator login plus (2fa) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Drupal / Authenticator Login Plus (2FA)
0.0.0 < 1.0.1
Credits
mouhamed rayen mansouri (w0nd3r) mugesh.s Swan Kalata (akalata) Juraj Nemec (poker10)