CVE-2026-32729 | Runtipi up to 4.8.0 /api/auth/verify-totp excessive authentication

March 14, 2026 Yanac

A vulnerability was found in Runtipi up to 4.8.0. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the file /api/auth/verify-totp. This manipulation causes improper restriction of excessive authentication attempts.

This vulnerability appears as CVE-2026-32729. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More