CVE-2026-49467

Pingvin Share X is a secure and easy self-hosted file sharing platform. A vulnerability in versions 1.5.0 through 1.18.0 allow an attacker to bypass password verification when managing Time-based One-Time Password TOTP settings. The root cause is a missing await keyword on calls to the asynchrono...

PT-2026-71174

Name of the Vulnerable Software and Affected Versions Pingvin Share X versions 1.5.0 through 1.18.0 Description A flaw allows an attacker to bypass password verification when managing Time-based One-Time Password TOTP settings. The issue stems from a missing await keyword during calls to the...