EUVD-2026-84112

@sync-in/server vulnerable to TOTP Brute-Force via POST /api/app/sync/register...