PT-2026-44707

CVE-2026-6816

Published

2026-05-28

Updated

2026-07-21

CVSS 4.0

5.1

Medium

MetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Drupal TFA Basic Plugins versions 7.x-1.0 through 7.x-1.2

Description An access bypass issue allows users possessing the administer users permission to view or generate recovery codes for other users.

Recommendations Update Drupal TFA Basic Plugins to a version later than 7.x-1.2.

Exploitability

Exploit

Fix

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾