CVE-2026-126730

This module enables you to require a second authentication factor a time-based one-time password from an authenticator app when users log in. The module does not enforce the second authentication factor correctly. As a result, an attacker who has only the first factor for an account with 2FA for...

DRUPAL-CONTRIB-2026-321

This module enables you to require a second authentication factor a time-based one-time password from an authenticator app when users log in. The module does not enforce the second authentication factor correctly. As a result, an attacker who has only the first factor for an account with 2FA for...

PT-2026-145646

This module enables you to require a second authentication factor a time-based one-time password from an authenticator app when users log in. The module does not enforce the second authentication factor correctly. As a result, an attacker who has only the first factor for an account with 2FA for...