CVE-2026-108157 | smp46 Pingvin Share X up to 1.21.x GenericOidcProvider OAuthService.signUp improper authentication

October 9, 2026 Yanac

A vulnerability was found in smp46 Pingvin Share X up to 1.21.x and classified as critical. This issue affects the function OAuthService.signUp of the component GenericOidcProvider. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-108157. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More