CVE-2026-62669 | getgrav Login Plugin up to 3.8.10 Two-Factor Authentication taskRegenerate2FASecret improper authorization

A vulnerability was found in getgrav Login Plugin up to 3.8.10. It has been rated as critical. Affected is the function taskRegenerate2FASecret of the component Two-Factor Authentication. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-62669. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More