misaka_danmu_server vulnerabilities

2 known vulnerabilities in misaka_danmu_server from L429609201. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  misaka_danmu_server: Missing Authentication for Critical Functionality

  CVE-2026-111644Oct 16, 2026L429609201

  Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can

• 9.8 Critical severity

  misaka_danmu_server: Missing Authentication for Critical Functionality

  CVE-2026-111643Oct 16, 2026L429609201

  Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist k