CVE-2026-55186
1 advisory.
Packagist/silverstripe/mfa CVE-2026-55186: medium 4.2
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
Action: Upgrade silverstripe/mfa to 6.0.0 or later.
composer require silverstripe/mfa:6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-68wq-phq7-p2vg
- https://github.com/silverstripe/silverstripe-mfa/security/advisories/GHSA-68wq-phq7-p2vg
- https://github.com/silverstripe/silverstripe-mfa
- https://github.com/silverstripe/silverstripe-mfa/releases/tag/6.0.0
- https://www.silverstripe.org/download/security-releases/cve-2026-55186
CVE-2026-55186 · published · modified · JSON