Skip to content

CVE record · 1 source

CVE-2026-63440

CVSS 5.9

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.

Vendor: Bubka
Product: 2FAuth
CVSS v3.1: 5.9 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Weakness: CWE-367, CWE-918

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 3h ago

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.

2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, the otpauth image-fetch path validates a hostname through ValidatesUrls::isExternalHost() and then lets…

CVSS 5.9 Fix available CVE-2026-63440 Bubka