Vendors / Tfa Basic Plugins Project Tfa Basic Plugins Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Tfa Basic Plugins Project records in CISA KEV No Tfa Basic Plugins Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 56
An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users.
CVSS 4.0 MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00321 · Published 2026-05-28 · No fix listed CWE-267
Open these records in search → All records by CVSS severity
0 0 1 0 0
