TI-2026-24670 CVE-2026-32133
2FAuth has Blind SSRF in image parameter allows internal network access and more
Priority HIGH 73
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
Bubka
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Bubka records in CISA KEVNo Bubka vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in 2fauth · all components
TI-2024-35258 CVE-2024-52598
2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview
Priority HIGH 72
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
TI-2025-28827 CVE-2025-45731 · GHSA-vqm9-87vr-9765
A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned…
Priority MEDIUM 62
A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.
TI-2024-35257 CVE-2024-52597
2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render
Priority MEDIUM 60
2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.
Priority MEDIUM 60
2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes.