CVE-2026-15079

—

CVSS 3.1

5.4 medium

EPSS

<1%p21

Published

Jul 10, 2026 (Jul 10, 2026)

Modified

Aug 6, 2026

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This issue affects Login Disable versions: from 0.0.0 to 2.1.4.

Vendors: budda
Products: login disable
Ecosystems: Drupal
Weakness: CWE-307
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.