Description
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue affects Shield versions: from 0.0.0 to 1.9.0.
Published:
2026-10-30
Score:
n/a
EPSS:
n/a
KEV:
No
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
| Link | Providers |
|---|---|
| https://www.drupal.org/sa-contrib-2026-248 |
|
History
Fri, 30 Oct 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue affects Shield versions: from 0.0.0 to 1.9.0. | |
| Title | Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248 | |
| Weaknesses | CWE-307 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: drupal
Published:
Updated: 2026-10-30T03:09:20.371Z
Reserved: 2026-10-07T15:25:19.994Z
Link: CVE-2026-107256
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses