Bubka 2FAuth

• CVE-2026-32133 High 7.8 2FAuth has Blind SSRF in image parameter allows internal network access and more 0.6%
• CVE-2024-52598 High 7.5 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview 0.6%
• CVE-2024-52597 Medium 6.1 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render 0.4%
• CVE-2023-36816 Medium 6.1 Cross-Site Scripting (XSS) at Account creation in 2FAuth 0.5%