Authenticator Login

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-8995 PHP CRITICAL PATCH Act Now

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.0.0 before 2.1.4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Drupal Authenticator Login

NVD

CVSS 3.1

9.8

EPSS

0.1%

CVE-2025-31681 PHP CRITICAL PATCH Act Now

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.0.0 before 2.0.6. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Drupal Authenticator Login

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2025-8995 PHP

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass Drupal Authenticator Login

NVD

CVE-2025-31681 PHP

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

Authentication Bypass Drupal Authenticator Login

NVD