Read the docs

smp46

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

smp46 records in CISA KEV

No smp46 vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-70100 CVE-2026-108157

Account takeover in Pingvin Share X via OAuth email linking

Priority MEDIUM 48

Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.sign…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00535 Published 2026-10-09 Fixed in 1.22.0 CWE-287
TI-2026-70530 CVE-2026-108162 · GHSA-3chq-cx7h-2cfx

Rate limit bypass in Pingvin Share X via spoofed X-Forwarded-For

Priority LOW 38

Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00183 Published 2026-10-10 Fixed in 1.22.0 CWE-348
TI-2026-70531 CVE-2026-108163 · GHSA-2x75-qffm-gvv9

Ineffective authentication rate limiting in Pingvin Share X

Priority LOW 36

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00217 Published 2026-10-10 Fixed in 1.22.0 CWE-307
Open these records in search →