Is CVE-2026-28431 actively exploited?

CVE-2026-28431 has no public evidence of in-the-wild exploitation as of 2026-03-10.

What is the CVSS score for CVE-2026-28431?

CVE-2026-28431 has a CVSS score of 9.2 (CRITICAL severity). Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

How do I patch CVE-2026-28431?

Vendor patch guidance is linked from the references on this page. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2026-28431.

Which products are affected by CVE-2026-28431?

Affected products for CVE-2026-28431 are listed on this page once vendor data becomes available.

Fix CVE-2026-28431 - CRITICAL Vulnerability

Description

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper input validation. This vulnerability occurs regardless of whether federation is enabled or not. This vulnerability could lead to a significant data breach. This vulnerability is fixed in 2026.3.1.

CVSS Metrics

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Confidentiality: undefined
Integrity: undefined
Availability: undefined
Weaknesses: CWE-285

Metadata

Primary Vendor: UNKNOWN
Published: 3/10/2026
Last Modified: 3/10/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

No affected products information available.

Remediation Guidance

Executive Summary

Cite this page

CVE-2026-28431. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2026-28431

View on NIST NVD

CVE-2026-28431 vulnerability