CVE-2026-107256CWE-307

CVE-2026-107256: vulnerability in Drupal Shield

Shield - Moderately critical - Access bypass - SA-CONTRIB-2026-248

Published

Follow this CVE+ Monitor Shield+ Monitor drupal/shield

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield allows Brute Force. This issue affects Shield versions: from 0.0.0 to 1.9.0.
Affected products
Drupal · Shield