CVE-2026-63437 | Bubka 2FAuth up to 7.x Account Sharing TwoFAccountShareController.php recipients improper authorization

A vulnerability, which was classified as problematic, was found in Bubka 2FAuth up to 7.x. This affects the function recipients of the file app/Api/v1/Controllers/TwoFAccountShareController.php of the component Account Sharing. The manipulation results in improper authorization.

This vulnerability is identified as CVE-2026-63437. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More