| Summary | An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins: from 7.x-1.0 through 7.x-1.2. |
|---|---|
| Publication Date | May 29, 2026, 8:16 a.m. |
| Registration Date | May 30, 2026, 4:11 a.m. |
| Last Update | May 29, 2026, 11:46 p.m. |