CVE-2025-9551

CVE-2025-9551: Protected Pages - Moderately critical - Access bypass - SA-CONTRIB-2025-101

Vendor Drupal
Product Protected Pages
Weakness CWE-307 · Brute force
Published October 10, 2025
Last update March 26, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Protected Pages allows Brute Force.This issue affects Protected Pages: from 0.0.0 before 1.8.0, from 7.X-1.0 before 7.X-2.5.

Key dates

02Disclosure timeline

October 10, 2025 CVE published
March 26, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-48290 WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability CVE-2025-7393 Mail Login - Critical - Access bypass - SA-CONTRIB-2025-088 CVE-2024-32774 WordPress ProfileGrid plugin <= 5.8.2 - Group Members Limit Bypass vulnerability CVE-2026-8760 Login with OTP <= 1.6 - Unauthenticated Authentication Bypass via OTP Brute Force CVE-2025-10658 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover