VULNERABILITY INTELLIGENCE

CVE-2026-4208

CVSS score8.8 HIGH
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-03-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.

Weakness classification

  • f4fb688c-4412-4426-b4b8-421ecf27b14a: CWE-639

Primary references