CWE-307: Excessive authentication attempts

CVEs per yearBy the year they were published

1. 202033
2. 202010
3. 20201
4. 202151
5. 202265
6. 20225
7. 20231
8. 202571
9. 2026196
10. 2026108
11. 202693
12. 202653

Newest CVEs

• CVE-2026-121535

  miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication

  miroslavpejic85 · MiroTalk P2P

  Medium6.3
• CVE-2026-118505

  AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

  team-alembic · ash_authentication

  Medium6.3
• CVE-2026-116238

  pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks

  pgadmin.org · pgAdmin 4

  Critical9.2
• CVE-2026-111501

  Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated…

  Dell · OpenManage Enterprise

  Medium5.4
• CVE-2026-22114

  Missing brute-force protection for web interface

  Delta Electronics · Delta UFC500

  Medium5.3
• CVE-2026-107256

  Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248

  Drupal · Shield

  Not scored
• CVE-2026-15586

  OTP Brute-Force Account Takeover in Idvlabs Software's Ontime

  İdvlabs Software and Consulting Services Inc. · Ontime

  Medium5.3
• CVE-2026-107145

  Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator

  alexandregz · twofactor_gauthenticator

  Medium6.3
• CVE-2026-77057

  Improper Restriction of Excessive Authentication Attempts in boneIO

  boneIO · boneIO

  Low2.3
• CVE-2026-116123

  NocoDB signup validatePassword excessive authentication

  NocoDB

  Medium6.3

Vendors it comes up for most

1. IBM35
2. Dell19
3. nextcloud17
4. Fortinet11
5. Drupal9
6. Akinsoft8
7. Siemens8
8. OpenClaw7
9. Schneider Electric7
10. WWBN7