TI-2026-03655 CVE-2026-4208 · GHSA-29r8-gvx4-r9w3
Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)
Priority LOW 35
The extension fails to properly reset the generated MFA code after successful authentication.
No Mrsilaz vulnerabilities are listed in CISA KEV.
1 record
The extension fails to properly reset the generated MFA code after successful authentication.