
Abdullah Kareem@CyberKareem
Disclosure
New CVE-2026-62671 in http://getgrav.org. One click on an attacker's link could quietly rotate a logged in user's 2FA secret, leaving their authenticator app out of sync #cve #research https://t.co/x1pxRHwNPX
Post summary
The tweet announces the new CVE‑2026‑62671 for getgrav.org, stating that a single click could rotate a user’s 2FA secret, but it offers no PoC, exploit, patch, or evidence of active use.
0000057
236 followersView on X
