Email Tfa

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-12760 PHP MEDIUM PATCH This Month

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.0.0 before 2.0.6. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Drupal Email Tfa

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2025-31676 PHP HIGH PATCH This Week

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.0.0 before 2.0.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Drupal Email Tfa

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2025-12760 PHP

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

Authentication Bypass Drupal Email Tfa

NVD

CVE-2025-31676 PHP

EPSS 0% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Drupal Email Tfa

NVD