CVE-2026-13348
CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to a user account by performing an arbitrary number of authentication attempts when redirect handling is disabled.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.31%
- CWE
- CWE-307
- Published
- 2026-09-01
- Last modified
- 2026-09-01
Affected products
- Schneider Electric PowerChute™ Serial Shutdown
Weakness type
Related vulnerabilities
- CVE-2026-78490 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-86729 — WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
- CVE-2026-6223 — OTP Bypass in Bahçelievler Muncipality's BiHayat App
- CVE-2026-20514 — In Audio HAL, there is a possible information disclosure due to a missing permission check. This...
- CVE-2026-20512 — In Audio HAL, there is a possible escalation of privilege due to improper input validation. This...
- CVE-2026-86186 — AVideo API Rate Limit Bypass via Bot User-Agent Header
- CVE-2026-85237 — Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass
- CVE-2026-16675 — Rockwell Automation FactoryTalk® Activation Manager - Privilege Escalation