CVE-2026-112205
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Nov 09, 2026
Vendor
unknown
Description
WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. The cookie-based lockout can be bypassed by omitting the login_count and login_timeout cookies, allowing an unauthenticated attacker to perform an unlimited number of login attempts. This issue has been fixed in version 2.5.