3349 matches found
CVE-2026-103283 Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling
Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...
CVE-2026-103283
Ghost versions 6.20.0 before 6.57.1 are affected by a session handling vulnerability. This flaw allows authenticated staff users to log in as any other staff member by providing only a password, effectively bypassing two-factor authentication . Attackers with valid staff credentials can exploit t...
CVE-2026-103283 Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling
Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...
CVE-2026-103283 Ghost 6.20.0 before 6.57.1 Authentication Bypass via Session Handling
Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...
EUVD-2026-90676
Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...
CVE-2026-103655
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
EUVD-2026-90550
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
CVE-2026-103283: Insufficient Session Expiration
Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassing two-factor authentication. Attackers with valid staff credentials can exploit improper session management to...
PT-2026-103734
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.48 Description A flaw in the two-factor authentication TOTP verification process allows a valid one-time code to be accepted multiple times within its time-based validity window, typically 30 seconds. This occurs...
CVE-2026-103655: Authentication Bypass by Capture-replay
MISP contains a vulnerability in its two-factor authentication TOTP verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor...
PT-2026-103815
Name of the Vulnerable Software and Affected Versions Ghost versions 6.20.0 through 6.57.0 Description Improper session management allows authenticated staff users to log in as any other staff user using only a password, which bypasses two-factor authentication. This enables attackers with valid...
CVE-2026-100508
Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...
CVE-2026-100508
The WordPress Two Factor plugin versions
EUVD-2026-89938
Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...
CVE-2026-100508 WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Two Factor = 0.16.0 versions...
WordPress Two Factor plugin <= 0.16.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Two Factor versions = 0.16.0...