CVE

CVE-2020-15906

9.8

CVSS

Description

tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid login attempts.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 28, 2026View on NVD →

S4E scanner

CVE-2020-15906 Scanner

CVE-2020-15906 Scanner - Authentication Bypass vulnerability in Tiki Wiki CMS GroupWare

Used 3.4k times · 3.4k assets checked · domain, ipv4, subdomain

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.