Back to the CVE list
CVE-2026-107145

Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator

CVSS score

6.3

EPSS probability

—

Risk score

0.6

Published

4 h ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

CERT Polska27.10.2026

Podatności we wtyczce twofactor_gauthenticator dla Roundcube

CERT Polska otrzymał zgłoszenie dotyczące 3 podatności (od CVE-2026-107145 do CVE-2026-107147) wykrytych we wtyczce twofactor_gauthenticator dla Roundcube.

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-107145"
CVE-2026-107145 · Lack of rate-limiting in 2fa code check…