CWE-645 · Authentication
Overly Restrictive Account Lockout Mechanism
10CVEs
SortMost likely exploited
10 CVEs with CWE-645 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-4346In CISA KEVExploitedKNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gai…KNX Association · KNX Protocol Connection Authorization Option 1 · CVSS 7.5 · 2023-08-29 | 7.5 | 1.4% | 2023-08-29 |
| CVE-2024-1722Keycloak-core: dos via account lockoutRed Hat · Red Hat Build of Keycloak · CVSS 3.7 · 2024-02-27 | 3.7 | 0.8% | 2024-02-27 |
| CVE-2026-126626Overly Restrictive Account Lockout Mechanism in hMailServerProgressive Robot Ltd · hMailServer · CVSS 5.3 · 2026-11-11 | 5.3 | 0.5% | 2026-11-11 |
| CVE-2024-37028BIG-IP Next Central Manager vulnerabilityF5 · BIG-IP Next Central Manager · CVSS 5.3 · 2024-08-14 | 5.3 | 0.4% | 2024-08-14 |
| CVE-2025-5241Denial-of-Service Vulnerability in MELSEC iQ-F SeriesMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES · CVSS 5.3 · 2025-07-11 | 5.3 | 0.4% | 2025-07-11 |
| CVE-2026-105624Zenitel Connect login allows account-lockout denial of serviceZenitel · Zenitel Connect · CVSS 6.9 · 2026-11-13 | 6.9 | 0.4% | 2026-11-13 |
| CVE-2026-35161Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access cou…Dell · PowerScale InsightIQ · CVSS 5.3 · 2026-10-14 | 5.3 | 0.4% | 2026-10-14 |
| CVE-2025-31947Repeated LDAP login failures can lock an LDAP accountMattermost · Mattermost · CVSS 5.8 · 2025-05-15 | 5.8 | 0.4% | 2025-05-15 |
| CVE-2026-53982Cap-go Console < 12.28.2 Account Deletion DoS via Device Identifier AssociationCap-go · capgo · CVSS 6.5 · 2026-06-12 | 6.5 | 0.3% | 2026-06-12 |
| CVE-2026-25907Dell PowerScale OneFS, version 9.13.0.0, contains an overly restrictive account lockout mechanism vulnerability. An unauthenticated attacker with remote access could potentially e…Dell · PowerScale OneFS · CVSS 5.3 · 2026-03-04 | 5.3 | 0.3% | 2026-03-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.