Advisories · Technology

smp46 pingvin-share-x.

Every CVE that names smp46 pingvin-share-x among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108163 CVE record

CVSS 6.9 Medium

Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL
- smp46 pingvin-share-x
- Authentication bypass
Not analysed yet 10 Oct 2026
CVE-2026-108162 CVE record

CVSS 6.9 Medium

Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For
- smp46 pingvin-share-x
- CWE-348
Not analysed yet 10 Oct 2026
CVE-2026-108157 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking
- smp46 pingvin-share-x
- Authentication bypass
Not analysed yet 9 Oct 2026
CVE-2026-49467 CVE record

CVSS 8.8 High

TOTP enrollment hijack: password gate skipped due to unawaited promise
- smp46 pingvin-share-x
- Authentication bypass
Not analysed yet 12 Aug 2026
CVE-2026-44196 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Pingvin Share X: TOTP Authentication Bypass via Password-only Login
- smp46 pingvin-share-x
- Authentication bypass
- CWE-697
Not analysed yet 12 May 2026