Bubka

9 CVEs in 1 Bubka product, including 2fauth. Newest: CVE-2026-63441 (2026-11-06). Severity, EPSS and public exploits for each.

Bubka products with known CVEs

ProductCVEs
2fauth9
Bubka CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-634412026-11-062FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. From 6.1.0 until 8.0.0, App\Services\Traits\Validates…
CVE-2026-63440Medium5.92026-11-062FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, the otpauth image-fetch path validate…
CVE-2026-63439Critical9.82026-11-062FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, when AUTHENTICATION_GUARD=reverse-pro…
CVE-2026-63438Critical9.82026-11-062FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, when AUTHENTICATION_GUARD=reverse-pro…
CVE-2026-63437Medium6.52026-11-062FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 8.0.0, the recipients() method in app/Api/v1…
CVE-2026-32133Critical9.12026-03-112FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Prior to 6.1.0, a blind SSRF vulnerability exists in…
CVE-2024-52598High7.52024-11-202FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Two interconnected vulnerabilities exist in version 5…
CVE-2024-52597Medium6.12024-11-202FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Versions prior to 5.4.1 are vulnerable to stored cros…
CVE-2023-36816Medium6.12023-07-032FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the…