Typo3 Extension "E Mail MFA Provider" vulnerabilities

1 vulnerability

Known vulnerabilities in Typo3 Extension "E Mail MFA Provider", newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2026-4208typo3 · extension "e-mail mfa provider" +1 moreAuthentication Bypass in extension "E-Mail MFA Provider" (mfa_email)The extension fails to properly reset the generated MFA code after successful authentication. This leads to a possible MFA bypass for future login attempts by providing an empty string as MFA code to the extensions MFA provider.CVSS8.8HighEPSS0.27%