Skip to content
OpenAdvisories

Package · Packagist

silverstripe/mfa

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-55186

    Silverstripe MFA: Can bypass MFA during password reset flow

    Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. Prior to 6.0.0, the CMS 5 password reset flow can issue a logged-in session after a user changes a password but before the user's configured multi-factor authentication challenge is c…

    silverstripe silverstripe-mfa silverstripe/mfa Packagist