CVE-2026-111643
Received Received - Intake

Authentication Bypass in Misaka Danmu Server

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter trustedProxies and webhookApiKey, to access every protected endpoint as the administrator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-111643
EUVD
EUVD-2026-103065

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
l429609201 misaka_danmu_server 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Misaka Danmu Server through version 2.8.9 has an authentication bypass flaw. Unauthenticated attackers can exploit the POST /api/ui/config-history/rollback endpoint to write arbitrary configuration keys. This allows setting ipWhitelist to their own IP address or modifying trustedProxies and webhookApiKey, granting access to all administrator-protected endpoints.

Detection Guidance

Check for unauthorized POST requests to /api/ui/config-history/rollback. Inspect server logs for suspicious configuration changes, especially modifications to ipWhitelist, trustedProxies, or webhookApiKey.

Impact Analysis

Attackers could gain full administrative access to the server by bypassing authentication. This could lead to unauthorized configuration changes, data theft, or complete server compromise. Systems relying on this server for content delivery or user interaction may be disrupted or hijacked.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face fines, legal penalties, and reputational damage due to non-compliance resulting from this flaw.

Mitigation Strategies

Upgrade Misaka Danmu Server to version 2.8.10 or later. Restrict access to the /api/ui/config-history/rollback endpoint via firewall rules. Review and revert any unauthorized configuration changes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111643. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart