Authenticator Login Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Authenticator Login Project records in CISA KEV

No Authenticator Login Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Authenticator Login 3 records MEDIUM

Records

3 records

TI-2025-08242 CVE-2025-8995 · GHSA-x4hh-vfx4-455p

Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

MEDIUM 50

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-08-15 Fixed in 2.1.4 CWE-288

TI-2025-22825 CVE-2025-31681 · GHSA-jwpx-6c4p-q4jq

Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

MEDIUM 49

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00434 Published 2025-03-31 Fixed in 2.0.6 CWE-862

TI-2025-07405 CVE-2025-8093 · GHSA-pjrr-5qr2-gxw3

Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

MEDIUM 40

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00354 Published 2025-10-10 Fixed in 2.1.8 CWE-288

Open these records in search →