Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-107147— Authentication bypass by spoofing in twofactor_gauthenticator

Quick assessment

Affected
alexandregz twofactor_gauthenticator
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Roundcube 的 twofactor_gauthenticator 插件存在双因素身份验证（2FA）绕过漏洞，攻击者可通过伪造客户端地址头来利用该漏洞。由于插件未对 和 请求头进行有效验证，一旦攻击者获取了用户密码，即可伪造一个已列入白名单的 IP 地址，从而绕过第二重身份验证。 该问题已在提交 4640889 中修复。

CVSS 6.3 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-107147

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Authentication bypass by spoofing in twofactor_gauthenticator
Source: CVE Program / CVE List V5
Vulnerability Description
The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the second factor being bypassed. This issue was fixed in commit 4640889.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
alexandregz twofactor_gauthenticator 0 ~ 4640889 -

II. Public POCs for CVE-2026-107147

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-107147

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-107147 (1)

Other References for CVE-2026-107147 (1)

Same Patch Batch · alexandregz · 2026-10-27 · 3 CVEs total

CVE-2026-107146 6.3 MEDIUM Insufficient session expiration in twofactor_gauthenticator
CVE-2026-107145 6.3 MEDIUM Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator

IV. Related Vulnerabilities

Same product: twofactor_gauthenticator
Same vendor: alexandregz
Same weakness: CWE-290