Early access. This site has moved to bugrater.com.

Security releases

Drupal

Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207

SA-CONTRIB-2026-207 Oct 7, 2026 Source: Vendor

Imported by the Drupal advisory catcher from https://www.drupal.org/sa-contrib-2026-207. 1 reporter(s), 2 fixer(s). Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.drupal.org/sa-contrib-2026-207
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines
Showing 1–2 of 2
CVE-2026-107268 BR2026-0000-020163 unclaimed
Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207
Credited as Nam Nguyen Le Thanh (yuwkaa)
CVE-2026-107268 BR2026-0000-020164 unclaimed
Two Factor Authentication - TFA / Passwordless Login - Moderately critical - Information disclosure - SA-CONTRIB-2026-207
Credited as Mohammed Hisam (hisam45)