CVE-2026-126731

This module enables you to require a second authentication factor a time-based one-time password from an authenticator app when users log in. Under certain circumstances, an attacker can make the module treat a login as having passed the password check when it did not, or reach the two-factor set...

PT-2026-145647

This module enables you to require a second authentication factor a time-based one-time password from an authenticator app when users log in. Under certain circumstances, an attacker can make the module treat a login as having passed the password check when it did not, or reach the two-factor set...