CVE-2025-10928

MEDIUM EPSS 13.1%

Published Oct 30, 20258mo ago · Modified Jun 17, 20261w ago

6.3 CVSS 3.1

Medium

Published Oct 30, 2025 8mo ago

Last Modified Jun 17, 2026 1w ago

Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.5.

CVSS Details

Base Score

6.3

Exploitability

2.8

Impact

3.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality Low

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

13.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-307

Affected Products 1

Vendor	Product	Version	Range
access_code_project	access_code	*	<2.0.5

References 1

drupal.org https://www.drupal.org/sa-contrib-2025-108

PatchVendor Advisory

Remediation

drupal.org https://www.drupal.org/sa-contrib-2025-108

PatchVendor Advisory