CVE-2026-14254 — Improper Restriction of Excessive Authentication Attempts in Delphix Continuous Data
A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. Parallel log…
Published: 2026-07-16 · CVSS: 8.3 · CVSS 4.0
A race condition in the account lockout mechanism in Delphix Continous Data allowed the lockout threshold to be bypassed through concurrent authentication requests. Parallel login attempts were processed before the failed-login counter and lockout status were updated, defeating brute-force protections and enabling continued password guessing against a targeted account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7