CVE-2026-19897

LOW 3.7

mangroup dtale Login Endpoint auth.py login excessive authentication

CVSS Score

3.7

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in mangroup dtale up to 3.22.0. This issue affects the function Login of the file dtale/auth.py of the component Login Endpoint. Such manipulation leads to improper restriction of excessive authentication attempts. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-307 CWE-799
Vendor	mangroup
Product	dtale
Published	Aug 15, 2026

Stay Ahead of the Next One

Get instant alerts for mangroup dtale

Be the first to know when new low vulnerabilities affecting mangroup dtale are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

mangroup / dtale

3.0 3.1 3.2 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 3.12 3.13 3.14 3.15 3.16 3.17 3.18 3.19 3.20 3.21 3.22.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/390087 vuldb.com: https://vuldb.com/vuln/390087/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19897 vuldb.com: https://vuldb.com/submit/870673 github.com: https://github.com/man-group/dtale/issues/961

Credits

🔍 ZAST.AI (VulDB User) VulDB CNA Team