CVE-2026-112205

The WidzialniCMS login functionality is vulnerable to a Bruteforce Protection Bypass . The application relies on cookie-based lockout mechanisms, which can be circumvented by an unauthenticated attacker by omitting the login_count and login_timeout cookies. This allows for an unlimited number of ...