All 3 CVE vulnerabilities found in pingvin-share-x, with AI-generated Chinese analysis, references, and POCs.
Vendor: smp46
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-108157 | Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking CWE-287 | 8.1 | High | 2026-10-09 |
| CVE-2026-49467 | TOTP enrollment hijack: password gate skipped due to unawaited promise CWE-303 | 8.8 | High | 2026-08-12 |
| CVE-2026-44196 | Pingvin Share X: TOTP Authentication Bypass via Password-only Login CWE-287 | 9.1 | Critical | 2026-05-12 |
All 3 known CVE vulnerabilities affecting pingvin-share-x with full Chinese analysis, references, and POCs where available.