CVE-2026-16642

CVE-2026-16642 affects the Drupal Email Login OTP contrib module, all versions (. ). The Drupal security advisory (SA-CONTRIB-2026-085) classifies the issue as Critical and marks the project as unsupported , indicating that a known security vulnerability has not been fixed by the maintainer. No s...

CVE-2026-33640 Outline has a rate limit bypass that allows brute force of email login OTP

Outline is a service that allows for collaborative documentation. Outline implements an Email OTP login flow for users not associated with an Identity Provider. Starting in version 0.86.0 and prior to version 1.6.0, Outline does not invalidate OTP codes based on amount or frequency of invalid...