CVE-2025-69246 — Lack of bruteforce protection in Raytha CMS

CVE-2025-69246

Lack of bruteforce protection in Raytha CMS PUBLISHED

Description (CNA)

Raytha CMS does not have any brute force protection mechanism implemented. It allows an attacker to send multiple automated logon requests without triggering lockout, throttling, or step-up challenges. This issue was fixed in version 1.4.6.

Affected (CNA)

Vendor / product	Versions
Raytha / Raytha	affected 0 before 1.4.6

CWE

CWE-307

References

https://cert.pl/en/posts/2026/03/CVE-2025-69236
https://raytha.com

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.