Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    1
    Critical Level Threats
    1
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-32133

    2FAuth has Blind SSRF in image parameter allows internal network access and more

    Last Modified: Mar 20, 2026
    Published: Mar 11, 2026

    CVE-2025-45731

    A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a group is deleted while other operations are pending.

    Last Modified: Jan 20, 2026
    Published: Jul 24, 2025

    CVE-2024-52598

    2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview

    Last Modified: Aug 04, 2025
    Published: Nov 20, 2024

    CVE-2024-52597

    2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render

    Last Modified: Aug 04, 2025
    Published: Nov 20, 2024

    CVE-2023-36816

    Cross-Site Scripting (XSS) at Account creation in 2FAuth

    Last Modified: Nov 22, 2024
    Published: Jul 03, 2023
    Items Per Page
    2fauth Vulnerabilities & Security CVEs | CVE-DB