CVE-2026-14254 — Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data

CVE-2026-14254

Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data PUBLISHED

Description (CNA)

A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. Parallel login attempts were processed before the failed-login counter and lockout status were updated, defeating brute-force protections and enabling continued password guessing against a targeted account.

Affected (CNA)

Vendor / product	Versions
Perforce / Delphix Continuous Data	unaffected 2026.4.0.0

CWE

CWE-307

References

https://portal.perforce.com/s/cve/a91Qi0000036VKLIA2/improper-restriction-of-excessive-authentication-attempts-in-delphix-cd

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.