Planka vulnerabilities

1 known vulnerability in Planka from Planka. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  planka: Improper Restriction of Excessive Authentication Attempts

  CVE-2026-105835Oct 6, 2026Planka

  PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. Attackers who know a user's password can reuse the ten-minute pending token to g