Bubka vulnerabilities
9 published CVEs name Bubka among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-63439
2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification
Bubka · 2FAuth
Critical9.8 - CVE-2026-63438
2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value
Bubka · 2FAuth
Critical9.8 - CVE-2026-63440
2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU)
Bubka · 2FAuth
Medium5.9 - CVE-2026-63441
2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets
Bubka · 2FAuth
Medium4.9 - CVE-2026-63437
2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration
Bubka · 2FAuth
Medium6.5 - CVE-2026-32133
2FAuth has Blind SSRF in image parameter allows internal network access and more
Bubka · 2FAuth
High7.8 - CVE-2024-52598
2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/preview
Bubka · 2FAuth
High7.5 - CVE-2024-52597
2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render
Bubka · 2FAuth
Medium6.1 - CVE-2023-36816
Cross-Site Scripting (XSS) at Account creation in 2FAuth
Bubka · 2FAuth
Medium6.1