PT-2026-107752 · Packagist · Drupal/Auth Login Plus

CVE-2026-107261

·

Published

2026-10-07

·

Updated

2026-10-07

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
This module provides TOTP-based two-factor authentication (2FA) for Drupal, with an optional setting to enforce 2FA for all users site-wide.
The module may allow a user log in with only a password even when site-wide enforcement of 2FA is turned on.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-107261
DRUPAL-CONTRIB-2026-201

Affected Products

Drupal/Auth Login Plus