QSearchQSearch

CVE-2025-4319

9.4 CRITICAL

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Bireb...

Published: 2026-01-23 · Last updated: 2026-06-05

Severity and scoring

CVSS
9.4 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CWE
CWE-307, CWE-640

Description

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-45013 — ApostropheCMS is an open-source Node.js content management system (8.1 HIGH)
  • CVE-2026-6853 — Improper restriction of excessive authentication attempts vulnerability in Başbelen Group Food Cafe Businesses Industry and Trade Ltd (9.8 CRITICAL)
  • CVE-2026-12066 — A security flaw has been discovered in PbootCMS up to 3.2.12 (7.3 HIGH)
  • CVE-2026-3329 — A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository v...
  • CVE-2026-50635 — LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it (8.8 HIGH)