CVE-2026-47677
1 advisory.
Packagist/facturascripts/facturascripts CVE-2026-47677: critical
FacturaScripts: Account takeover of any 2FA-enabled user
Action: Upgrade facturascripts/facturascripts to 2026.3 or later.
composer require facturascripts/facturascripts:2026.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3 | - |
Fixed versions
| 2026.3 |
Sources
- osv: GHSA-c67f-gmxw-mj93
- https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-c67f-gmxw-mj93
- https://github.com/NeoRazorX/facturascripts
- https://github.com/NeoRazorX/facturascripts/releases/tag/v2026.3
CVE-2026-47677 · published · modified · JSON