CVE-2026-62671 | getgrav Login Plugin up to 3.8.10 taskRegenerate2FASecret toctou

August 19, 2026 Yanac

A vulnerability was found in getgrav Login Plugin up to 3.8.10. It has been classified as problematic. Affected by this vulnerability is the function taskRegenerate2FASecret. Performing a manipulation results in time-of-check time-of-use.

This vulnerability is known as CVE-2026-62671. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More