CVE-2026-18260

—

CVSS 3.1

5.7 medium

EPSS

<1%p12

Published

Aug 25, 2026 (21d ago)

Modified

Sep 2, 2026

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Disable Login Page allows Brute Force. This issue affects Disable Login Page versions: from 0.0.0 to 1.1.4.

Ecosystems: Drupal
Weakness: CWE-307, CWE-20
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.