[MEDIUM] CVE-2026-55186 - Can bypass MFA during password reset flow

PKSA-xxk3-rjxm-jftv CVE-2026-55186 GHSA-68wq-phq7-p2vg

Affected package: silverstripe/mfa

Affected version: <6.0.0

Reported by:
GitHub, FriendsOfPHP/security-advisories