Bubka 2FAuth güvenlik açıkları
Bubka
- Toplam açık
- 5
- Kritik
- 2
- Aktif istismar
- 0
- Yaması çıkan
- 4
- Son açık
- 35 dk önce
Önem dağılımı
- Kritik 2
- Yüksek 0
- Orta 3
- Düşük 0
Son açıklar
5 açık
- 9,8Kritik CVE-2026-63439Yama var 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification
- 9,8Kritik CVE-2026-63438Yama var 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value
- 5,9Orta CVE-2026-63440Yama var 2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)
- 4,9Orta CVE-2026-63441 2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets
- 6,5Orta CVE-2026-63437Yama var 2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration