Threats tagged 'ghsa-68wq-phq7-p2vg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.2	CVE-2026-55186silverstripe/mfa · MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow Medium4.22026-10-29GCVE DatabaseCVE-2026-55186 A vulnerability in SilverStripe CMS version 5 allows bypassing multi-factor authentication (MFA) during the password reset process. An attacker with access to a user's email can reset the password and gain a logged-in session without completing MFA. This issue is fixed in version 6.0.0 and does not affect CMS 6. Vulnerability CWE-288 #ghsa-68wq-phq7-p2vg #packagist	GCVE Database	2026-10-29

Page 1 of 1