Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:41:57 +0000 CVE-2026-71293 — Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_user Variable https://vulnerability.circl.lu/vuln/cve-2026-71293 <p><strong>Affected:</strong> statamic cms</p> <p>Statamic CMS&#39;s user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user&#39;s raw two-factor recovery codes with no access restriction.</p> <p><strong>Affected:</strong> statamic cms</p> <p>Statamic CMS&#39;s user-augmentation resolver, AugmentedUser::get in src/Auth/AugmentedUser.php, contains an explicit case for the handle that returns the user&#39;s raw two-factor recovery codes with no access restriction.</p> https://vulnerability.circl.lu/vuln/cve-2026-71293