Threats tagged 'ghsa-r7p3-q524-5mc7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.3%	CVE-2026-100501pawelmalak flame · Improper Restriction of Excessive Authentication Attempts High8.3EPSS 0.3%2026-09-25CVE Database V5CVE-2026-100501 Flame versions up to and including 2.4.0 have a vulnerability in the POST /api/auth login endpoint that allows unauthenticated attackers to perform unlimited brute-force attempts on the admin password. There are no rate limits, attempt counters, lockouts, or delays, enabling attackers to gain full administrator access and modify application configuration. EPSS 0.3%Vulnerability #ghsa-r7p3-q524-5mc7	CVE Database V5	2026-09-25

Page 1 of 1