CVE-2026-4208
1 advisory.
Packagist/ralffreit/mfa-email CVE-2026-4208: high 8.8
Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)
Action: Upgrade ralffreit/mfa-email to 1.0.7 or later.
composer require ralffreit/mfa-email:1.0.7composer require ralffreit/mfa-email:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.7 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.0.7 | 2.0.1 |
Sources
- osv: GHSA-29r8-gvx4-r9w3
- https://nvd.nist.gov/vuln/detail/CVE-2026-4208
- https://github.com/MrSilaz/mfa_email/commit/0bb7e85b236a5232f7b092915453dd7c3da48f12
- https://github.com/MrSilaz/mfa_email
- https://github.com/MrSilaz/mfa_email/releases/tag/v1.0.7
- https://github.com/MrSilaz/mfa_email/releases/tag/v2.0.1
- https://typo3.org/security/advisory/typo3-ext-sa-2026-007
CVE-2026-4208 · published · modified · JSON