Skip to content
OpenAdvisories

Vendor

smp46

5 known vulnerabilities.

Products

pingvin-share-x 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-108157

    Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

    Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's…

    smp46 pingvin-share-x
  • High 8.8
    CVE-2026-49467

    TOTP enrollment hijack: password gate skipped due to unawaited promise

    Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when managing Time-based One-Time Password (TOTP) settings. The root cause is a missing …

    smp46 pingvin-share-x