CVE-2026-108162— Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For
Quick assessment
Affected
smp46 pingvin-share-x
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Pingvin Share X 1.22.0 之前版本存在一个速率限制绕过漏洞，允许未认证的远程攻击者规避基于 IP 的限制。这是因为 无条件信任代理头信息。攻击者可以通过对 、 和 接口轮换伪造的 头，暴力破解密码和 TOTP 验证码，并伪造客户端的源 IP 地址。
Possible ATT&CK Techniques 2 AI
T1552.005 · Cloud Instance Metadata API T1110.001 · Password Guessing
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108162
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For
Source: CVE Program / CVE List V5
Vulnerability Description
Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn, /api/auth/signIn/totp, and /api/auth/resetPassword to brute-force passwords and TOTP codes and forge logged client IP addresses.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用不可信的源
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| smp46 | pingvin-share-x | 0 ~ 1.22.0 | - |
|
II. Public POCs for CVE-2026-108162
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108162
请登录查看更多情报信息。
Vendor Pages for CVE-2026-108162 (1)
-
🔗 Release v1.22.0 · smp46/pingvin-share-x · GitHub release-notes
Other References for CVE-2026-108162 (4)
IV. Related Vulnerabilities
Same product: pingvin-share-x
-
CVE-2026-108163
Pingvin Share X before 1.22.0 Ineffective Authentication Rat -
CVE-2026-108157
Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OA -
CVE-2026-49467
TOTP enrollment hijack: password gate skipped due to unawait -
CVE-2026-44196
Pingvin Share X: TOTP Authentication Bypass via Password-onl
Same vendor: smp46
-
CVE-2026-108163
Pingvin Share X before 1.22.0 Ineffective Authentication Rat -
CVE-2026-108157
Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OA -
CVE-2026-49467
TOTP enrollment hijack: password gate skipped due to unawait -
CVE-2026-44196
Pingvin Share X: TOTP Authentication Bypass via Password-onl
Same weakness: CWE-348
-
CVE-2026-108555
PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Hea -
CVE-2026-78015
Dell SCG Policy Manager <5.34.00.16 信任来源漏洞 -
CVE-2026-107271
Gophish through 0.12.1 Login Rate Limit Bypass via X-Forward -
CVE-2026-105051
Denuvo Anti-Tamper 2026-03-04 前版本存在绕过Hypervisor检测漏洞 -
CVE-2026-103592
simple-php-router through 5.4.1.7 IP restriction bypass via
V. Comments for CVE-2026-108162
No comments yet