CVE-2026-108157criticalCWE-287

CVE-2026-108157: falha crítica em smp46 pingvin-share-x

Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

Publicada em

Seguir esta CVE+ Monitorar pingvin-share-x

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.5%
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
smp46 · pingvin-share-x
CVEs relacionadas — smp46 pingvin-share-x

No mesmo produto, das mais perigosas para as menos.

CVE-2026-49467HIGHTOTP enrollment hijack: password gate skipped due to unawaited promiseEPSS 0.6%CVE-2026-44196CRITICALPingvin Share X: TOTP Authentication Bypass via Password-only LoginEPSS 0.3%CVE-2026-108163MEDIUMPingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTLEPSS 0.2%CVE-2026-108162MEDIUMPingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-ForEPSS 0.2%