CVE-2025-6675 | Enterprise MFA TFA prior 4.8.0/5.0.0/5.1.0/5.2.1 on Drupal authentication bypass (sa-contrib-2025-082)

June 26, 2025 Yanac

A vulnerability classified as critical was found in Enterprise MFA TFA on Drupal. Affected by this vulnerability is an unknown functionality. The manipulation leads to authentication bypass using alternate channel.

This vulnerability is known as CVE-2025-6675. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More