CVE-2026-105835 - PLANKA 2.2.0 through 2.2.1 TOTP Brute Force via verify-totp Endpoint
CVE ID :CVE-2026-105835 Published : Oct. 6, 2026, 1:16 p.m. | 2 hours, 11 minutes ago Description :PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who...