CVE-2026-55186 — 脆弱性インテリジェンス
PHP / Composer — silverstripe/mfa
公表日:
- CVSS
- 4.2
- CISA KEV
- 未掲載（悪用がないことを意味しません）
情報源の原文（翻訳ではありません）
MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow
### Impact
In CMS 5, the password reset flow let a user with multi-factor authentication enabled change their password and get a logged-in session before completing multi-factor authentication. Exploiting this requires access to the user's email account. CMS 6 is not affected.