Login Request a demo
TA
Product
Two-factor Authentication
by Two-factor Authentication Project · last CVE Jul 8, 2025
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 1Medium 1Low 0
Severity
All severities4Critical2High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Two-factor Authentication to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13279
9.8
0%
Jan 9
Two-factor Authentication (TFA) - Critical - Access bypass - SA-CONTRIB-2024-043
Affected: before 8.x-1.8
CVE-2024-13239
9.8
1%
Jan 9
Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003
Affected: before 8.x-1.5
CVE-2025-31694
8.1
0%
Mar 31
Incorrect Authorization vulnerability in Drupal Two-factor Authentication (TFA) allows Forceful Browsing.This issue affects Two-factor Authentication (TFA): from 0.0.0 before…
Affected: before 8.x-1.10
CVE-2025-7030
6.5
0%
Jul 8
Privilege Defined With Unsafe Actions vulnerability in Drupal Two-factor Authentication (TFA) allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
Affected: before 8.x-1.11
Showing 4