smp46 vulnerabilities

Newest CVEs

• CVE-2026-108163

  Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

  smp46 · pingvin-share-x

  Medium6.9
• CVE-2026-108162

  Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For

  smp46 · pingvin-share-x

  Medium6.9
• CVE-2026-108157

  Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

  smp46 · pingvin-share-x

  Critical9.2
• CVE-2026-49467

  TOTP enrollment hijack: password gate skipped due to unawaited promise

  smp46 · pingvin-share-x

  High8.8
• CVE-2026-44196

  Pingvin Share X: TOTP Authentication Bypass via Password-only Login

  smp46 · pingvin-share-x

  Critical9.1