Dashboard / CVE-2026-107268

CVE-2026-107268

1 PoC
INFO Priority: 0.00 BB Relevance: 10/100
Published: 2026-10-30 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two Factor Authentication - TFA / Passwordless Login versions: from 0.0.0 to 5.4.1, from 5.5.0 to 5.5.2.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Drupal Two Factor Authentication - TFA / Passwordless Login 0.0.0 < 5.4.1
Drupal Two Factor Authentication - TFA / Passwordless Login 5.5.0 < 5.5.2

References & Advisories (1)

Proof of Concept (1)

—
https://github.com/yuwkaaa/CVE-2026-107268
nomi-sec

Bug Bounty Relevance

10 / 100
✓ PoC available (1)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

mitre ref →
nvd ref →

External Links