CVE-2026-44196

Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and password to skip the second-factor authentication (TOTP) requirement entirely. Although, an attacker still needs the user's password to reach this stage. This vulnerability is fixed in 1.16.3.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/smp46/pingvin-share-x/security/advisories/GHSA-j679-vp39-qwqq

Configurations

No configuration.

History

26 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Pingvin Share X es una plataforma segura y sencilla de autoalojamiento para compartir archivos. Desde la versión 1.14.1 hasta la 1.16.2, una vulnerabilidad crítica de omisión de autenticación permite a un atacante que ha obtenido un nombre de usuario y una contraseña válidos omitir completamente el requisito de autenticación de segundo factor (TOTP). Aunque, un atacante aún necesita la contraseña del usuario para alcanzar esta etapa. Esta vulnerabilidad está corregida en la versión 1.16.3.

Information

Published : 2026-05-12 18:17

Updated : 2026-10-26 18:10

NVD link : CVE-2026-44196

Mitre link : CVE-2026-44196

CVE.ORG link : CVE-2026-44196

JSON object : View

Products Affected

No product.

CWE

CWE-287

Improper Authentication

CWE-697

Incorrect Comparison

{"id": "CVE-2026-44196", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-44196", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-14T19:48:14.609120Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "smp46", "product": "pingvin-share-x", "versions": [{"status": "affected", "version": ">= 1.14.1, < 1.16.3"}]}]}], "published": "2026-05-12T18:17:29.730", "references": [{"url": "https://github.com/smp46/pingvin-share-x/security/advisories/GHSA-j679-vp39-qwqq", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "CWE-697"}]}], "descriptions": [{"lang": "en", "value": "Pingvin Share X is a secure and easy self-hosted file sharing platform. From 1.14.1 to 1.16.2, a critical authentication bypass vulnerability allows an attacker who has obtained a valid username and password to skip the second-factor authentication (TOTP) requirement entirely. Although, an attacker still needs the user's password to reach this stage. This vulnerability is fixed in 1.16.3."}, {"lang": "es", "value": "Pingvin Share X es una plataforma segura y sencilla de autoalojamiento para compartir archivos. Desde la versi\u00f3n 1.14.1 hasta la 1.16.2, una vulnerabilidad cr\u00edtica de omisi\u00f3n de autenticaci\u00f3n permite a un atacante que ha obtenido un nombre de usuario y una contrase\u00f1a v\u00e1lidos omitir completamente el requisito de autenticaci\u00f3n de segundo factor (TOTP). Aunque, un atacante a\u00fan necesita la contrase\u00f1a del usuario para alcanzar esta etapa. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 1.16.3."}], "lastModified": "2026-10-26T18:10:00.173", "sourceIdentifier": "security-advisories@github.com"}