CVE-2026-44196

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:06+00:00| seen| https://t.me/shimiscyberworld/1417 2026-09-13 00:00:52+00:00| seen| https://t.me/shimiscyberworld/1417...

CVE-2026-44196

Pingvin Share X (self-hosted file sharing) from versions 1.14.1–1.16.2 contains a critical authentication bypass that allows an attacker with valid credentials to skip the second-factor (TOTP) requirement. The attacker still needs the user’s password to reach this stage. The issue is fixed in 1.1...

CVE-2026-44196 Pingvin Share X: TOTP Authentication Bypass via Password-only Login

Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and password to skip the second-factor authentication TOTP requirement entirely. Although, an attacker...