Threats tagged 'ghsa-h9w3-vw4p-h6vw'

1 threat

Threats tagged 'ghsa-h9w3-vw4p-h6vw'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-111643misaka_danmu_server · Missing Authentication for Critical Function Critical9.3EPSS 0.4%2026-10-16CVE Database V5CVE-2026-111643 Misaka Danmu Server versions up to 2.8.9 have an authentication bypass vulnerability in the POST /api/ui/config-history/rollback endpoint. This flaw allows unauthenticated attackers to write arbitrary configuration keys, including ipWhitelist, trustedProxies, and webhookApiKey, enabling them to gain administrator-level access to all protected endpoints. EPSS 0.4%Vulnerability l429609201 #ghsa-h9w3-vw4p-h6vw	CVE Database V5	2026-10-16

Showing 1–1 of 1 result