What’s Vulnerable › Products

Bubka 2FAuth vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Bubka 2FAuth version is affected

Latest Bubka 2FAuth vulnerabilities

• CVE-2026-32133 — 2FAuth has Blind SSRF in image parameter allows internal network access and more (CVSS 9.1)
• CVE-2025-45731 — (CVSS 6.5)
• CVE-2024-52598 — 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview (CVSS 7.5)
• CVE-2024-52597 — 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render (CVSS 6.1)
• CVE-2023-36816 — Cross-Site Scripting (XSS) at Account creation in 2FAuth (CVSS 6.1)