Sunshine vulnerabilities
CVEs whose affected-version data names the Sunshine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111044High· 7.6Disabled Sunshine clients can bypass revocation with a derived client certificate
Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-client certificate, but it did not require the presented certi…
▾ TwilightLizardByte · Sunshinevia CVEORG
CVE-2025-54081Medium· 6.7Sunshine is a self-hosted game stream host for Moonlight
Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a s…
▾ Sunlitlizardbyte · sunshineEPSS 0.24%via NVD