Lucene search
K

273 matches found

RedhatCVE
RedhatCVE
added 2026/03/11 7:8 a.m.1 views

CVE-2026-28433

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/11 7:8 a.m.1 views

CVE-2026-28431

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/11 7:8 a.m.1 views

CVE-2026-28432

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.5CVSS5.8AI score0.00019EPSS
Exploits0References1
NVD
NVD
added 2026/03/10 7:43 a.m.2 views

CVE-2026-28431

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

9.2CVSS0.0005EPSS
Exploits0References1
NVD
NVD
added 2026/03/10 7:43 a.m.4 views

CVE-2026-28433

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

4.3CVSS0.00014EPSS
Exploits0References1
NVD
NVD
added 2026/03/10 7:43 a.m.1 views

CVE-2026-28432

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.5CVSS0.00019EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/10 12:0 a.m.3 views

Misskey 安全漏洞

Misskey is an open-source, permanently free social media platform developed by Misskey. Versions of Misskey from 10.93.0 until 2026.3.1 had security vulnerabilities due to a lack of ownership verification, which could lead to the import of other user data...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/10 12:0 a.m.2 views

Misskey 授权问题漏洞

Misskey is an open-source, permanently free social media platform developed by Misskey. Versions of Misskey from 8.45.0 until 2026.3.1 had an authorization issue vulnerability. This vulnerability stemmed from insufficient permission checks and input validation, which could lead to severe data...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/10 12:0 a.m.3 views

Misskey 数据伪造问题漏洞

Misskey is an open-source, permanently free social media platform developed by Misskey. Versions of Misskey prior to 2026.3.1 had a data manipulation vulnerability, which stemmed from allowing bypasses of HTTP signature verification...

7.5CVSS5.7AI score0.00019EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/09 9:21 p.m.1 views

EUVD-2026-10370

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS5.8AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2026/03/09 9:21 p.m.4 views

CVE-2026-28433

Misskey CVE-2026-28433 affects servers running 10.93.0 and later, before 2026.3.1, where importing other users’ data is possible due to lack of ownership validation in the import process. The vulnerability’s impact is described as relatively low (confidentiality impact LOW; requires the target fi...

4.3CVSS5.8AI score0.00014EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/03/09 9:21 p.m.2 views

EUVD-2026-10369

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS5.8AI score0.00014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/09 9:21 p.m.2 views

CVE-2026-28433 Misskey lacks resource ownership validation

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS5.8AI score0.00014EPSS
Exploits0References1
OSV
OSV
added 2026/03/09 9:21 p.m.1 views

CVE-2026-28433 Misskey lacks resource ownership validation

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS5.8AI score0.00014EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/09 9:21 p.m.3 views

CVE-2026-28433

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS5.8AI score0.00014EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/09 9:21 p.m.35 views

CVE-2026-28433 Misskey lacks resource ownership validation

Misskey is an open source, federated social media platform. All Misskey servers running versions 10.93.0 and later, but prior to 2026.3.1, contain a vulnerability that allows importing other users' data due to lack of ownership validation. The impact of this vulnerability is estimated to be...

2.3CVSS0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/09 9:19 p.m.34 views

CVE-2026-28432 HTTP signature verification can be bypassed

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.1CVSS0.00019EPSS
Exploits0References1
OSV
OSV
added 2026/03/09 9:19 p.m.0 views

CVE-2026-28432 HTTP signature verification can be bypassed

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.1CVSS5.8AI score0.00019EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/09 9:19 p.m.0 views

CVE-2026-28432

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.1CVSS5.8AI score0.00019EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/09 9:19 p.m.0 views

CVE-2026-28432 HTTP signature verification can be bypassed

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled o...

7.1CVSS5.8AI score0.00019EPSS
Exploits0References1
Rows per page
Query Builder