Threats tagged 'ghsa-7p7c-6qwr-q8j7'

1 threat

Threats tagged 'ghsa-7p7c-6qwr-q8j7'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.5%	CVE-2026-108157pingvin-share-x · Improper Authentication Critical9.2EPSS 0.5%2026-10-09CVE Database V5CVE-2026-108157 Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic OAuth email linking in OAuthService.signUp(). Attackers can register a victim's unverified email on an enabled OAuth/OIDC provider, exploiting the missing email_verified check in GenericOidcProvider, to sign in as the victim including administrators while bypassing TOTP. EPSS 0.5%Vulnerability smp46 #ghsa-7p7c-6qwr-q8j7	CVE Database V5	2026-10-09

Showing 1–1 of 1 result