Insufficient state checks lead to a vector that allows to bypass 2FA checks.CreditsMorris Baumgarten-EgemoleReferenceshttps://developer.joomla.org/security-centre/1044-20260512-core-mfa-authentication-bypass.html
