Smp46 vulnerabilities
We track 3 vulnerabilities in Smp46 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.
Latest Smp46 vulnerabilities
- 8.1 High severity
pingvin-share-x: Improper Authentication
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's
- 8.8 High severity
pingvin-share-x: Incorrect Implementation of Authentication Algorithm
Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when managing Time-based One-Time Password (TOTP) settings. The root cause is a missing `
- 9.1 Critical severity
pingvin-share-x: Improper Authentication
Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and password to skip the second-factor authentication (TOTP) requ