CVE-2026-82470 - Rodauth before 2.47.0 TOTP Code Reuse via Drift Window
Brief
CVE ID : CVE-2026-82470
Published : Aug. 29, 2026, 5:17 p. m.
- 3 hours, 57 minutes ago
Description : Rodauth before 2.
- 0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor.
Severity: 5.4
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...