영향받는 버전 라인
알려진 취약점
| CVE | 제목 | 영향 버전 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|---|
| CVE-2026-127088 | 2FAuth before 9.0.1 Password Reset Poisoning via Host Header | < 9.0.1 | 8.6 | 0.6% | 2026-11-13 | |
| CVE-2026-63439 | 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification | * | 9.8 | — | 2026-11-07 | |
| CVE-2026-63438 | 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value | * | 9.8 | — | 2026-11-07 | |
| CVE-2026-63440 | 2FAuth: Authenticated SSRF via DNS rebinding in the otpauth image= icon fetch (validate-then-fetch TOCTOU) | * | 5.9 | — | 2026-11-07 | |
| CVE-2026-63441 | 2FAuth: SSRF guard misses IPv6 NAT64 prefixes, allowing image fetch to reach internal/metadata targets | * | 4.9 | — | 2026-11-07 | |
| CVE-2026-63437 | 2FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration | * | 6.5 | — | 2026-11-07 | |
| CVE-2026-32133 | 2FAuth has Blind SSRF in image parameter allows internal network access and more | * | 7.8 | — | 2026-03-12 | |
| CVE-2025-45731 | A group deletion race condition in 2FAuth v5.5.0 causes data inconsistencies and orphaned accounts when a grou... | * | 6.5 | — | 2025-07-24 | |
| CVE-2024-52598 | 2FAuth vulnerable to Server Side Request Forgery + URI validation bypass in 2fauth /api/v1/twofaccounts/previe... | * | 7.5 | — | 2024-11-20 | |
| CVE-2024-52597 | 2FAuth vulnerable to stored cross-site scripting via SVG upload and direct access render | * | 6.1 | — | 2024-11-20 | |
| CVE-2023-36816 | Cross-Site Scripting (XSS) at Account creation in 2FAuth | * | 6.1 | — | 2023-07-04 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).