agentprime: bubka-2fauthEvery new CVE for bubka-2fauth.https://agentprime.io/CVE-2026-127088: 2FAuth before 9.0.1 Password Reset Poisoning via Host Headerhttps://agentprime.io/advisories/CVE-2026-127088/https://agentprime.io/advisories/CVE-2026-127088/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Nov 2026 09:34:16 GMTCVECVE-2026-63439: 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verificationhttps://agentprime.io/advisories/CVE-2026-63439/https://agentprime.io/advisories/CVE-2026-63439/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:22:31 GMTCVEcriticalCVE-2026-63438: 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Valuehttps://agentprime.io/advisories/CVE-2026-63438/https://agentprime.io/advisories/CVE-2026-63438/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:20:27 GMTCVEcriticalCVE-2026-63440: 2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)https://agentprime.io/advisories/CVE-2026-63440/https://agentprime.io/advisories/CVE-2026-63440/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:18:43 GMTCVECVE-2026-63441: 2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targetshttps://agentprime.io/advisories/CVE-2026-63441/https://agentprime.io/advisories/CVE-2026-63441/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:17:58 GMTCVECVE-2026-63437: 2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumerationhttps://agentprime.io/advisories/CVE-2026-63437/https://agentprime.io/advisories/CVE-2026-63437/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 20:16:05 GMTCVECVE-2026-32133: 2FAuth has Blind SSRF in image parameter allows internal network access and morehttps://agentprime.io/advisories/CVE-2026-32133/https://agentprime.io/advisories/CVE-2026-32133/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Mar 2026 21:45:09 GMTCVECVE-2024-52598: 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/previewhttps://agentprime.io/advisories/CVE-2024-52598/https://agentprime.io/advisories/CVE-2024-52598/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2024 14:09:45 GMTCVECVE-2024-52597: 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access renderhttps://agentprime.io/advisories/CVE-2024-52597/https://agentprime.io/advisories/CVE-2024-52597/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 Nov 2024 14:01:37 GMTCVECVE-2023-36816: Cross-Site Scripting (XSS) at Account creation in 2FAuthhttps://agentprime.io/advisories/CVE-2023-36816/https://agentprime.io/advisories/CVE-2023-36816/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Jul 2023 16:12:17 GMTCVE