Tfa Basic Plugins Project Tfa Basic Plugins — known CVE vulnerabilities

Every CVE whose affected-product data names Tfa Basic Plugins Project Tfa Basic Plugins, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2026-6816 — CVSS 3.8 (low): An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery…