CVE-2026-108163

Pingvin Share X versions prior to 1.22.0 are vulnerable to ineffective rate limiting due to a logic error where throttler TTL values specified in seconds are incorrectly interpreted as milliseconds. This allows unauthenticated attackers to send effectively unthrottled requests to the /api/auth/si...

CVE-2026-108163 Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

CVE-2026-108163 Pingvin Share X before 1.22.0 Ineffective Authentication Rate Limiting via Throttler TTL

Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/signIn, /api/auth/signIn/totp and...

PT-2026-109649

Name of the Vulnerable Software and Affected Versions Pingvin Share X versions prior to 1.22.0 Description An ineffective rate limiting issue exists because throttler TTL Time To Live values, which are intended to be specified in seconds, are incorrectly interpreted as milliseconds. This allows...