CVE-2026-105835 | Planka up to 2.2.1 TOTP verify-totp excessive authentication

October 6, 2026 Yanac

A vulnerability identified as problematic has been detected in Planka up to 2.2.1. This impacts an unknown function of the file /api/access-tokens/verify-totp of the component TOTP. The manipulation leads to improper restriction of excessive authentication attempts.

This vulnerability is traded as CVE-2026-105835. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More