misaka_danmu_server vulnerabilities
CVEs whose affected-version data names the misaka_danmu_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111643Critical· 9.8Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers ca…
▾ Midnightl429609201 · misaka_danmu_servervia CVEORG
CVE-2026-111644High· 7.3Misaka Danmu Server through 2.8.9 Missing Authentication on /api/ui Routes
Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dep…
▾ Twilightl429609201 · misaka_danmu_servervia CVEORG