medium4.8
CVE-2026-107254
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass.
Impact
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Authenticator Login Plus (2FA) | from 0.0.0 before 1.0.1 |