Vulnerabilities

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass. This issue affects Authenticator Login Plus (2FA) versions: from 0.0.0 to 1.0.1.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Drupal

Product

Authenticator Login Plus (2FA)

Weakness

CWE-288

Exposure class

Web platform

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-107254 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA allows Functionality Bypass.

   CVE-2026-118582 Drupal
2. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows Authentication Bypass.

   CVE-2026-118572 Drupal
3. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows Authentication Bypass.

   CVE-2026-114572 Drupal
4. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication Bypass.

   CVE-2026-114539 Drupal
5. 7
   CVE NVD 3d ago

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login Plus (2FA) allows Authentication Bypass.

   CVE-2026-107261 Drupal