Skip to content

CVE record · 1 source

CVE-2026-63438

CVSS 9.8

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.

Vendor: Bubka
Product: 2FAuth
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 2h ago

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, when AUTHENTICATION_GUARD=reverse-proxy-guard accepts authentication headers from a client that did not…

CVSS 9.8 Fix available CVE-2026-63438 Bubka