PatchTheCVE: miniorange 2fahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-6675: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Druphttps://patchthecve.com/cve/CVE-2025-6675.htmlhttps://patchthecve.com/cve/CVE-2025-6675.htmlWed, 17 Jun 2026 10:02:21 +0000MEDIUM 4.8: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0.*, from 0.0.0 before 5.1.*.CVE-2025-47710: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Druphttps://patchthecve.com/cve/CVE-2025-47710.htmlhttps://patchthecve.com/cve/CVE-2025-47710.htmlWed, 17 Jun 2026 09:28:35 +0000HIGH 7.4: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.CVE-2025-47709: Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This ishttps://patchthecve.com/cve/CVE-2025-47709.htmlhttps://patchthecve.com/cve/CVE-2025-47709.htmlWed, 17 Jun 2026 09:28:35 +0000MEDIUM 6.5: Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.CVE-2025-47708: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Rehttps://patchthecve.com/cve/CVE-2025-47708.htmlhttps://patchthecve.com/cve/CVE-2025-47708.htmlWed, 17 Jun 2026 09:28:35 +0000HIGH 8.8: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.CVE-2025-47707: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Druphttps://patchthecve.com/cve/CVE-2025-47707.htmlhttps://patchthecve.com/cve/CVE-2025-47707.htmlWed, 17 Jun 2026 09:28:35 +0000HIGH 7.5: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.CVE-2025-47706: Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote https://patchthecve.com/cve/CVE-2025-47706.htmlhttps://patchthecve.com/cve/CVE-2025-47706.htmlWed, 17 Jun 2026 09:28:35 +0000MEDIUM 4.8: Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.