Vulnerabilities (CVE)

Filtered by vendor Mrsilaz Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-4208 1 Mrsilaz 1 Mfa Mail 2026-04-25 N/A 8.8 HIGH
The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.