OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-97764

LOW · CVSS 3.7 EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-09-25 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Django-allauth versions prior to 65.19.4 are vulnerable to an issue where the handling of diacritics allows attackers to bypass the intended limits on failed login attempts, potentially leading to account enumeration or brute-force attacks. Organizations utilizing this library in their authentication processes should prioritize updating to mitigate the risk of unauthorized access.

CVE
CVE-2026-97764
Severity
LOW
CVSS
3.7
EPSS
0.23%

Original NVD Description

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics (e.g., accents) for a higher effective limit.