Insufficient state checks lead to a vector that allows to bypass 2FA checks.CreditsDoyensec in collaboration with Claude and Anthropic ResearchChristos Papakonstantinou, CantinaReferenceshttps://developer.joomla.org/security-centre/1043-20260511-core-mfa-authentication-bypass.html
