CVE-2025-3129

The Drupal Access code module (versions before 2.0.4 ) is vulnerable to a Brute Force attack due to Improper Restriction of Excessive Authentication Attempts . The module allows users to log in using short access codes instead of standard credentials but fails to provide sufficient protection aga...

CVE-2025-10928

The Drupal Access code module (versions prior to 2.0.5 ) is vulnerable to an Improper Restriction of Excessive Authentication Attempts vulnerability. This flaw allows an attacker to perform Brute Force attacks due to an unrestricted number of authentication attempts. No specific exploit informati...