PT-2026-103137 · Unknown · Two-Factor

·

CVE-2026-100508

·

Published

2026-09-30

·

Updated

2026-09-30

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Two Factor versions 0.16.0 and earlier
Description An unauthenticated Denial of Service (DoS) issue exists, which allows an attacker to disrupt the availability of the service without requiring valid credentials.
Recommendations Update Two Factor to a version later than 0.16.0.

Fix

DoS

Allocation of Resources Without Limits

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-100508

Affected Products

Two-Factor