Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-201 (CVE-2026-107261)

    Vulnerability from drupal – Published: 2026-10-07 16:23 – Updated: 2026-10-07 16:23 – Source website
    VLAI
    Details

    This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.

    The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.

    Credits
    mouhamed rayen mansouri (w0nd3r) www.drupal.org/u/w0nd3r
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c1.0.1"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/auth_login_plus"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c1.0.1"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107261"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/w0nd3r"
      ],
      "name": "mouhamed rayen mansouri (w0nd3r)"
    }
  ],
  "details": "This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.\n\nThe module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.",
  "id": "DRUPAL-CONTRIB-2026-201",
  "modified": "2026-10-07T16:23:53.000Z",
  "published": "2026-10-07T16:23:53.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-201"
    }
  ],
  "schema_version": "1.7.0"
}