CVE-2025-53968CWE-307

EVMAPA Improper Restriction of Excessive Authentication Attempts

High · published January 22, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

⚡ Brace yourself! Without any limits on authentication attempts, this vulnerability invites attackers to unleash a flood of requests, bringing your service to its knees! Think of this like a restaurant with no limit on how many times someone can order the same dish — a single overly eager customer can monopolize the kitchen, making it impossible for everyone else to enjoy their meal. 🍽️ If exploited, an attacker could overwhelm the authentication system, causing a denial-of-service (DoS) that keeps legitimate users locked out. Worse yet, it opens the door for brute-force attacks, allowing unauthorized access and potentially wreaking havoc on your data!

Put simply

Think of this like a restaurant with no limit on how many times someone can order the same dish — a single overly eager customer can monopolize the kitchen, making it impossible for everyone else to enjoy their meal. 🍽️ This vulnerability allows attackers to continuously send authentication requests without restriction, which can exhaust system resources and lead to service unavailability.

What to do

If exploited, an attacker could overwhelm the authentication system, causing a denial-of-service (DoS) that keeps legitimate users locked out. Worse yet, it opens the door for brute-force attacks, allowing unauthorized access and potentially wreaking havoc on your data! To mitigate this vulnerability, implement a limit on login attempts, such as a temporary lockout after a certain number of failed attempts. Additionally, consider employing CAPTCHAs or other forms of user verification to strengthen authentication protocols. Don't forget to monitor for unusual activity! You've got this! With these measures in place, you'll fortify your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-01-22T22:37Z
EPSS history
Timeline
  • 22 JAN 22:37Z
    EVMAPA Improper Restriction of Excessive Authentication Attempts
    cvelistv5