CVE-2026-49467 | smp46 Pingvin Share X up to 1.18.0 TOTP Settings auth.service.ts authenticateUser improper synchronization

August 12, 2026 Yanac

A vulnerability was found in smp46 Pingvin Share X up to 1.18.0. It has been rated as critical. This impacts the function authenticateUser of the file auth.service.ts of the component TOTP Settings. The manipulation leads to improper synchronization.

This vulnerability is listed as CVE-2026-49467. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More