CVE-2026-48115
Misskey: Improper Authorization in the Announcements API
CVSS score
6.3
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.5
CVE-2026-104816
Misskey: Cross-site scripting in RSS feed item links
M
Patch status unknownEPSS %1
8.7
CVE-2026-103937
Misskey: Denial of service resulting from insufficient cleanup processing during file uploads
M
Patch status unknownEPSS %1
8.7
CVE-2026-104817
Misskey: Lack of rate limiting and size restrictions in RSS fetching API
M
Patch status unknownEPSS %0
9.2
CVE-2026-46713
Misskey: JSON-LD signature validation + compaction may lead to improper activity handling
M
Patch status unknownEPSS %0
8.9
CVE-2026-47746
Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks
M
Patch status unknownEPSS %0
5.1
CVE-2026-46714
Misskey: Denial of Service via Uncontrolled Recursion in Theme Compilation
M
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-48115"