A vulnerability has been found in Drupal Disable Login Page Plugin and classified as critical. This affects an unknown part. This manipulation causes improper restriction of excessive authentication attempts. The identification of this vulnerability is CVE-2026-18260. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-18260 | Drupal Disable Login Page Plugin excessive authentication
A vulnerability has been found in Drupal Disable Login Page Plugin and classified as critical. This affects an unknown part. This manipulation causes improper restriction of excessive authentication attempts. The identification of this…
Reagiere als Erste:r — dein Feedback zählt!
IoC Intelligence (1 Indikatoren)
CVE-2026-18260
IR-PLAYBOOK-VULN-REMEDIATION
MEDIUMSOC Incident Playbook: Vulnerability Remediation & Verification
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - CVE-2026-18260 | Drupal Disable Login Page Plugin excessive authentication
id: c4d9702f-4458-41f0-9351-8c0f68841fec
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-24"
description = "YARA Signature for "
strings:
$str = "CVE-2026-18260 | Drupal Disabl" ascii wide
condition:
any of them
}
SOCIAL SHARE CARD GENERATOR