Brute Force Vulnerability in Email TFA Affects Drupal Product by Drupal

CVE-2025-31676

Summary

A vulnerability in the Email TFA module for Drupal allows attackers to exploit weak authentication mechanisms, enabling brute force attacks. This issue affects versions from 0.0.0 up to 2.0.2, potentially compromising user accounts and sensitive data. It is crucial for users to update to the latest version to mitigate this security risk. For more details, visit the official Drupal security advisory.

References