VulnSocial

CVE-2026-48115Disclosure

LOWCVSS 6.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in the Server Announcements API where insufficient permission checks allow attackers to access limited portions of data that they normally couldn't view. This vulnerability occurs whether or not federation is enabled. This issue has been fixed in version 2026.5.4.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-03: 208-03
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-48115 Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in… https://www.cve.org/CVERecord?id=CVE-2026-48115 ----- Traducción: CVE-2026-48115 Mis… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-48115 for Misskey, noting affected versions and linking to the CVE record, but does not provide PoC, exploit code, active usage, or mitigation details.

    0000056
    96 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-48115 Misskey is an open source, federated social media platform. All Misskey servers running versions 2024.5.0 and later, but prior to 2026.5.4, contain a vulnerability in… https://www.cve.org/CVERecord?id=CVE-2026-48115

    Post summary

    The text announces CVE-2026-48115 as affecting Misskey servers from version 2024.5.0 up to 2026.5.3, but provides no additional details on the vulnerability, its exploitation, or mitigation.

    00000897
    57.9K followersView on X

Explore more

Back to dashboard