Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    DRUPAL-CONTRIB-2026-197 (CVE-2026-107254)

    Vulnerability from drupal – Published: 2026-10-07 16:21 – Updated: 2026-10-07 16:21 – Source website
    VLAI
    Details

    This module provides TOTP-based two-factor authentication (2FA) for Drupal.

    The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link.

    This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a victim's account.

    Credits
    mouhamed rayen mansouri (w0nd3r) www.drupal.org/u/w0nd3r
    References
    To clipboard 

    {
  "affected": [
    {
      "database_specific": {
        "affected_versions": "\u003c1.0.1"
      },
      "package": {
        "ecosystem": "Packagist:https://packages.drupal.org/8",
        "name": "drupal/auth_login_plus"
      },
      "ranges": [
        {
          "database_specific": {
            "constraint": "\u003c1.0.1"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "severity": []
    }
  ],
  "aliases": [
    "CVE-2026-107254"
  ],
  "credits": [
    {
      "contact": [
        "https://www.drupal.org/u/w0nd3r"
      ],
      "name": "mouhamed rayen mansouri (w0nd3r)"
    }
  ],
  "details": "This module provides TOTP-based two-factor authentication (2FA) for Drupal.\n\nThe module doesn\u0027t enforce the second factor when a user logs in with Drupal core\u0027s one-time login link.\n\nThis vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a victim\u0027s account.",
  "id": "DRUPAL-CONTRIB-2026-197",
  "modified": "2026-10-07T16:21:13.000Z",
  "published": "2026-10-07T16:21:13.000Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://www.drupal.org/sa-contrib-2026-197"
    }
  ],
  "schema_version": "1.7.0"
}