https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:58:48.978393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-28432 CVE-2026-28432 — HTTP signature verification can be bypassed 2026-10-09T11:58:48.979994+00:00

Affected: misskey-dev misskey

Misskey is an open source, federated social media platform. All Misskey servers prior to 2026.3.1 contain a vulnerability that allows bypassing HTTP signature verification. Although this is a vulnerability related to federation, it affects all servers regardless of whether federation is enabled or disabled. This vulnerability is fixed in 2026.3.1.