CVE-2024-36469 is a timing side-channel vulnerability where the execution time for an unsuccessful login differs depending on whether the username exists or not. This discrepancy can potentially allow an attacker to infer valid usernames by measuring response times.