CVE-2026-32702 | Cleanuparr up to 2.8.0 Hashing /api/auth/login timing discrepancy

March 14, 2026 Yanac

A vulnerability marked as problematic has been reported in Cleanuparr up to 2.8.0. This issue affects some unknown processing of the file /api/auth/login of the component Hashing. The manipulation leads to observable timing discrepancy.

This vulnerability is uniquely identified as CVE-2026-32702. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More