Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state across authentication steps. Under certain conditions, an attacker with valid primary credentials could complete authentication with an attacker-controlled TOTP secret and bypass the additional factor. This could result in unauthorized account access. This issue is fixed in version 5.4.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-28510 eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state a… https://www.cve.org/CVERecord?id=CVE-2026-28510
Post summary
CVE-2026-28510 reveals a flaw in eLabFTW's MFA handling for versions up to 5.4.1; the post provides technical details but does not discuss PoC, exploit code, or patches.
🚨*CVE* CVE-2026-28510 eLabFTW is an open source electronic lab notebook. In elabftw versions through 5.4.1, the login flow did not reliably preserve the multi-factor authentication state a… https://www.cve.org/CVERecord?id=CVE-2026-28510 ----- Traducción: CVE-2026-28510 eLa… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑28510, noting a flaw in eLabFTW’s login flow that can break multi‑factor authentication, but it offers no evidence of active exploitation, PoC, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elabftw | elabftw | - | - | - |