CVE-2025-69246CWE-307

Lack of bruteforce protection in Raytha CMS

Medium · published March 16, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges.

This issue was fixed in version 1.4.6.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-307 · Improper Restriction of Excessive Authentication Attempts
Published
2026-03-16T11:54Z
EPSS history
Timeline
  • 16 MAR 11:54Z
    Lack of bruteforce protection in Raytha CMS
    cvelistv5