https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 07:23:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-105832 <p><strong>Affected:</strong> espocrm</p> <p>EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user&#39;s username and password can skip the second factor to read config parameters not exposed publicly.</p> <p><strong>Affected:</strong> espocrm</p> <p>EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a 2FA-enabled user&#39;s username and password can skip the second factor to read config parameters not exposed publicly.</p> https://vulnerability.circl.lu/vuln/cve-2026-105832