CVE-2026-40586

creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:57+00:00| seen| Telegram/HMXFp0TlwkMV3YbUFvnNEgjo9AC8CPiEoVa-pxPf99RdwY...

CVE-2026-40586

CVE-2026-40586 affects blueprintUE: prior to version 4.2.0, the login form handler does not throttle or rate-limit failed authentication attempts (no IP-based limits, no per-account counters, no temporary lockout, no tarpit, no CAPTCHA). This enables unlimited credential guessing attempts against...