[CRITICAL] FacturaScripts: Account takeover of any 2FA-enabled user

PKSA-dn8k-128k-8cz7 CVE-2026-47677 GHSA-c67f-gmxw-mj93

Affected package: facturascripts/facturascripts

Affected version: <=2026.2

Reported by:
GitHub