Alexandregz Twofactor Gauthenticator

1 CVEs affecting Alexandregz Twofactor Gauthenticator. Latest disclosed: 2026-10-27. Critical: 0, High: 0.

Top CVEs affecting Alexandregz Twofactor Gauthenticator
CVESeverityScorePublishedSummary
CVE-2026-1071472026-10-27The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation o…