Brute Force Protection Bypass in Drupal

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: Drupal.org

Description

vulnerability in Drupal Brute force attack protection allows . This issue affects Brute force attack protection versions: *.*.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-10

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-11

EPSS Evaluated

N/A

NVD

CVE-2026-11915

EUVD

EUVD-2026-43091

Affected Vendors & Products

Vendor	Product	Version / Range
drupal	brute_force_attack_protection	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Drupal Brute force attack protection module. It allows an attacker to bypass or exploit the brute force attack protection mechanism, potentially enabling repeated unauthorized login attempts.

Impact Analysis

The vulnerability can allow attackers to perform brute force attacks more effectively by circumventing the protection mechanisms. This could lead to unauthorized access to user accounts or administrative areas, increasing the risk of data breaches or system compromise.

Hi! I’m here to help you understand CVE-2026-11915. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70