{"id":"CVE-2026-112205","published":"2026-11-09T13:17:04.953","lastModified":"2026-11-09T18:17:20.393","description":"WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts.\n\n\n\n\nThis issue has been fixed in version 2.5.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-307"],"vendors":[],"products":[],"references":[{"url":"https://cert.pl/posts/2026/11/CVE-2026-110468","tags":[]},{"url":"https://widzialni.org/funkcjonalnosci-widzialni-cms,sd,mg,0,175","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}