Authenticator Login vulnerabilities

3 known vulnerabilities in Authenticator Login from Drupal. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Authenticator Login: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-8093Oct 10, 2025Drupal

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8.

• 9.8 Critical severity

  Authenticator Login: Missing Authentication for Critical Functionality

  CVE-2025-8995Aug 15, 2025Drupal

  Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4.

• 9.8 Critical severity

  Authenticator Login: Missing Authorization

  CVE-2025-31681Mar 31, 2025Drupal

  Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6.