{"metadata": {"vulnerability": "CVE-2026-111643", "count": 13, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111643", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-16T14:31:13.864Z", "date_only": false, "value": "2026-10-16T14:31:13.864Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-111643", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T17:39:13.043Z", "date_only": false, "value": "2026-10-16T17:39:13.043Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-111643", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T17:39:13.043Z", "date_only": false, "value": "2026-10-16T17:39:13.043Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-111643", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T17:39:13.043Z", "date_only": false, "value": "2026-10-16T17:39:13.043Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-111643", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T18:15:21.816Z", "date_only": false, "value": "2026-10-16T18:15:21.816228Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451949424478996", "record": "CVE-2026-111643", "field": "creation_timestamp", "uuid": "36bffbfb-cc66-422d-9e63-f93531febd5f", "content": "CVE-2026-111643 Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist key to their own /32 address, or alter trustedProxies and webhookApiKey, to access every protected endpoint as the administrator.\nhttps://www.cve.org/CVERecord?id=CVE-2026-111643https://hackmd.io/@hieuPenguinnn/misaka-danmu-server-ui-api-missing-authenticationhttps://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/api/ui/config_history.py#L51-L66https://github.com/l429609201/misaka_danmu_server/blob/v2.8.9/src/security.py#L136-L182https://www.vulncheck.com/advisories/misaka-danmu-server-through-2.8.9-authentication-bypass-via-config-history-rollback#l429609201 #misaka_danmu_server#CVE_2026_111643#bot", "url": "https://infosec.exchange/users/cve/statuses/117451949424478996"}, {"timestamp": "2026-10-16T18:17:45Z", "date_only": false, "value": "2026-10-16T18:17:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H9W3-VW4P-H6VW", "record": "GHSA-H9W3-VW4P-H6VW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T18:17:45.013Z", "date_only": false, "value": "2026-10-16T18:17:45.013", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111643", "record": "FKIE_CVE-2026-111643", "field": "published"}, {"timestamp": "2026-10-16T18:34:46Z", "date_only": false, "value": "2026-10-16T18:34:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H9W3-VW4P-H6VW", "record": "GHSA-H9W3-VW4P-H6VW", "field": "published"}, {"timestamp": "2026-10-16T18:34:46Z", "date_only": false, "value": "2026-10-16T18:34:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H9W3-VW4P-H6VW", "record": "GHSA-H9W3-VW4P-H6VW", "field": "modified"}, {"timestamp": "2026-10-16T19:03:18.127Z", "date_only": false, "value": "2026-10-16T19:03:18.127", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-111643", "record": "FKIE_CVE-2026-111643", "field": "lastModified"}, {"timestamp": "2026-10-16T20:08:43.984Z", "date_only": false, "value": "2026-10-16T20:08:43.984289Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzexmjzuy2w", "record": "CVE-2026-111643", "field": "creation_timestamp", "uuid": "fa101996-d969-4dc9-bd86-42b291fe8aba", "content": "\ud83d\udea8 CVE-2026-111643 \u2014 CVSS 9.3 CRITICAL\n\nMisaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-111643\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxzexmjzuy2w"}, {"timestamp": "2026-10-16T20:40:04.922Z", "date_only": false, "value": "2026-10-16T20:40:04.922965Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzgpnxjlz2q", "record": "CVE-2026-111643", "field": "creation_timestamp", "uuid": "f094212b-99a7-4333-8cf6-b065c753446e", "content": "CVE-2026-111643 - misaka_danmu_server\nThe Misaka Danmu Server (versions up to 2.8.9) lets anyone on the network change key settings through an unprotected web request. By changing the IP whitelist or other trust\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#l429609201 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxzgpnxjlz2q"}]}