EIP-2026-106589

This PoC demonstrates a CAPTCHA bypass vulnerability in the Drupal CAPTCHA module, allowing brute-force attacks by reusing session tokens after solving the CAPTCHA once. It automates login attempts with a predefined password list while handling anti-XSRF tokens dynamically.