CVE-2026-15079

The Login Disable module for Drupal versions 0.0.0 to 2.1.4 is vulnerable to improper restriction of excessive authentication attempts, allowing attackers to execute brute force attacks. This could lead to unauthorized access to user accounts, compromising the integrity of the application. Organizations using affected versions of the Login Disable module should prioritize remediation to mitigate potential security risks.