Planka vulnerabilities
We track 1 vulnerability in Planka products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Planka vulnerabilities
- 7.4 High severity
planka: Improper Restriction of Excessive Authentication Attempts
PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to g