35 matches found
CVE-2026-111644
Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the getcurrentuser dependency. Attackers can read audit logs with login IPs, server...
CVE-2026-111643
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter...
CVE-2026-111643
The Misaka Danmu Server (versions through 2.8.9 ) contains an authentication bypass vulnerability (CWE-306) due to an unprotected POST /api/ui/config-history/rollback endpoint. This flaw allows unauthenticated attackers to write arbitrary configuration keys. Specifically, attackers can modify the...
EUVD-2026-103065
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter...
CVE-2026-111644
Misaka Danmu Server versions through 2.8.9 are affected by a missing authentication vulnerability (CWE-306) located under the /api/ui routes. The root cause is the lack of the get_current_user dependency on specific endpoints, including audit, diagnostics, data-check, scan-index, and health route...
EUVD-2026-103066
Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the getcurrentuser dependency. Attackers can read audit logs with login IPs, server...
PT-2026-116043
Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get current user dependency. Attackers can read audit logs with login IPs, serve...
PT-2026-116042
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter...
CVE-2026-106445 vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
CVE-2026-106444 vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
GHSA-P8WG-VRV2-V86F vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
GHSA-XW65-4HP5-5HC7 vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
GHSA-8R5X-FM3F-WHWJ vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
CVE-2026-106446 vulnerabilities
Vulnerabilities for packages: langfuse, pelias-api, prism, rancher-api-ui, renovate, verdaccio, tileserver-gl, wazuh-dashboard-fips, ts-patch, tileserver-gl-fips, kibana, opensearch-dashboards, lerna, langfuse-fips, librechat, wazuh-dashboard, opensearch-dashboards-fips, nextcloud-server...
CVE-2026-106444 vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, tileserver-gl, renovate, prism, nextcloud-server, ts-patch, rancher-api-ui...
CVE-2026-106445 vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, tileserver-gl, renovate, prism, nextcloud-server, ts-patch, rancher-api-ui...
CVE-2026-106446 vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, tileserver-gl, renovate, prism, nextcloud-server, ts-patch, rancher-api-ui...
GHSA-P8WG-VRV2-V86F vulnerabilities
Vulnerabilities for packages: lerna, opensearch-dashboards, tileserver-gl, renovate, prism, nextcloud-server, ts-patch, rancher-api-ui...