Description
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomla! Project | Joomla! CMS | 3.2.0-3.9.24 | — |
Unscored
CVE-2021-23126
EUVD-2021-10244GHSA-429x-phj9-4788
[20210301] - Core - Insecure randomness within 2FA secret generation
Published Mar 4, 2021 · Updated Feb 25, 2026 · Assigned by Joomla