Email Tfa Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Email Tfa Project records in CISA KEV

No Email Tfa Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Tfa 2 records MEDIUM

Records

2 records

TI-2025-22820 CVE-2025-31676 · GHSA-34w4-3qr3-m637

Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-001

MEDIUM 41

Weak Authentication vulnerability in Drupal Email TFA allows Brute Force.This issue affects Email TFA: from 0.0.0 before 2.0.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00572 Published 2025-03-31 Fixed in 2.0.3 CWE-1390

TI-2025-11694 CVE-2025-12760 · GHSA-9jrw-jrrj-p6fr

Email TFA - Moderately critical - Access bypass - SA-CONTRIB-2025-115

LOW 24

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0021 Published 2025-11-18 Fixed in 2.0.6 CWE-288

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0