BaselineWatch
Desk

CVE-2026-15079

5.4 medium SSVC exploitation: none Analyzed

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This issue affects Login Disable versions: from 0.0.0 to 2.1.4.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 5.4 · buddaNVD modified 2026-10-25 15:10

Affected (CPE criteria) 1

  • cpe:2.3:a:budda:login_disable:*:*:*:*:*:drupal:*:*

References 1