Log in Start free

Bubka

Products

ProductCVEsExploitedLatest
2FAuth4–Mar 11, 2026

Exploited and recent CVEs

  • CVE-2026-32133 High 7.8 2FAuth has Blind SSRF in image parameter allows internal network access and more 0.6%
  • CVE-2024-52598 High 7.5 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview 0.6%
  • CVE-2024-52597 Medium 6.1 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render 0.4%
  • CVE-2023-36816 Medium 6.1 Cross-Site Scripting (XSS) at Account creation in 2FAuth 0.5%