Exposure of Misskey

Message boards

18

exposure score

49

sites use

0

exploited

4

critical

CVEs

28 results

CVE-2025-66402HIGHmisskey.js's export data contains private post dataEPSS 0.3%CVE-2026-28431CRITICALMisskey lacks proper authorization checks and input validationEPSS 0.2%CVE-2026-28433LOWMisskey lacks resource ownership validationEPSS 0.2%CVE-2025-46340HIGHMisskey CSS Style Injection Vulnerability In `MkUrlPreview`EPSS 0.2%CVE-2024-52579MEDIUMServer-Side Request Forgery vulnerability in various APIs in MisskeyEPSS 0.2%CVE-2025-25306CRITICALMisskey's Incomplete Patch of CVE-2024-52591 Leads to Forgery of Federated NotesEPSS 0.2%CVE-2026-28432HIGHHTTP signature verification can be bypassedEPSS 0.1%CVE-2025-24897HIGHMisskey CSRF vulnerability due to insecure configuration of authentication cookie attributesEPSS 0.1%

← previouspage 2 / 2next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →