UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-107268
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Passwordless Login allows Forceful Browsing. This issue affects Two Factor Authentication - TFA / Passwordless Login versions: from 0.0.0 to 5.4.1, from 5.5.0 to 5.5.2.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-30T07:58:06.356713+00:00
- Cve id
- CVE-2026-107268
- First seen by Signal
- 2026-10-30T07:59:20+00:00
- Retrieved at
- 2026-10-30T07:59:20+00:00
- Published at
- 2026-10-30T04:17:58.230
- Last modified
- 2026-10-30T04:17:58.230
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph