CVE-2025-7393 Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088
Attackers can bypass authentication restrictions to perform brute force attacks on user accounts in the Drupal Mail Login module.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-7393?
CVE-2025-7393 is a critical authentication bypass vulnerability in Drupal Mail Login, published on 21 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0.
Weakness: CWE-307
Which versions are affected by CVE-2025-7393?
It affects 1 product.
Linux distribution packages (1)
drupal/mail_login Packagist:https://packages.drupal.org/8 | All versions | 3.2.0, 4.2.0 |
Products include Mqanneh Mail Login.
How do I fix CVE-2025-7393?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-7393 being exploited?
There is no known exploitation of CVE-2025-7393 in the wild and no public exploit code.
Sources
Also known as DRUPAL-CONTRIB-2025-088, GHSA-jf2c-8v4p-mgg2.