CVE-2026-15079 Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070
Attackers can bypass login attempt restrictions to perform brute force attacks, potentially taking over user accounts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-15079?
CVE-2026-15079 is a medium-severity authentication bypass vulnerability in Drupal Login Disable, published on 10 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Login Disable allows Brute Force. This issue affects Login Disable versions: from 0.0.0 to 2.1.4.
Weakness: CWE-307
Which versions are affected by CVE-2026-15079?
It affects 1 product.
Linux distribution packages (1)
drupal/login_disable Packagist:https://packages.drupal.org/8 | All versions | 2.1.4 |
Products include Budda Login Disable.
How do I fix CVE-2026-15079?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-15079 being exploited?
There is no known exploitation of CVE-2026-15079 in the wild and no public exploit code.
Other vulnerabilities in Drupal Login Disable
Sources
Also known as DRUPAL-CONTRIB-2026-070, GHSA-v36x-q6gx-86g9.