Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•1 views

CVE-2026-82643: Improper Restriction of Excessive Authentication Attempts

WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustaine...

6.9CVSS5.8AI score0.00345EPSS
SaveExploits0References2
Rows per page
Query Builder