CVE-2026-1917

The Login Disable module for the Drupal content management system is vulnerable to an authentication bypass in versions prior to 2.1.3 . The root cause is that the module fails to verify the required access key when utilizing the HTTP request login route , even though it requires the key for stan...

CVE-2026-15079

The Login Disable module for Drupal (versions 0.0.0 through 2.1.4 ) is vulnerable to an improper restriction of excessive authentication attempts . The module requires a secret key to be added to the login form to allow access; however, it fails to sufficiently protect the form from brute force a...