[ Vendor · 3 CVEs ]
alexandregz
CVEs affecting alexandregz published in the last 30 days, plus any alexandregz CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107145 | 27 Oct 2026 | CVSS 6.3 | alexandregz twofactor_gauthenticatorThe twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an… | |
| CVE-2026-107146 | 27 Oct 2026 | CVSS 6.3 | alexandregz twofactor_gauthenticatorThe twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side… | |
| CVE-2026-107147 | 27 Oct 2026 | CVSS 6.3 | alexandregz twofactor_gauthenticatorThe twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of… |