CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2025-66482: misskey 13.0.0

CVE-2025-66482. CVSS 3.1 base score 6.5 (MEDIUM, NVD). EPSS 0.00339 (percentile 0.25487), scored 13-Oct-2026.

Affected technology

misskey · from 13.1.0 (inclusive), before 2025.12.0 (exclusive)
misskey

misskey · 13.0.0
misskey

misskey · 13.0.0 · update beta16
misskey

misskey · 13.0.0 · update beta21
misskey

misskey · 13.0.0 · update beta22
misskey

misskey · 13.0.0 · update beta23
misskey

misskey · 13.0.0 · update beta24
misskey

misskey · 13.0.0 · update beta25
misskey

misskey · 13.0.0 · update beta26
misskey

misskey · 13.0.0 · update beta27
misskey

misskey · 13.0.0 · update beta28
misskey

misskey · 13.0.0 · update beta29
misskey

misskey · 13.0.0 · update beta30
misskey

misskey · 13.0.0 · update beta31
misskey

misskey · 13.0.0 · update beta32
misskey

misskey · 13.0.0 · update beta33
misskey

misskey · 13.0.0 · update beta34
misskey

misskey · 13.0.0 · update beta35
misskey

misskey · 13.0.0 · update beta36
misskey

misskey · 13.0.0 · update beta37
misskey

misskey · 13.0.0 · update beta38
misskey

misskey · 13.0.0 · update beta39
misskey

misskey · 13.0.0 · update beta40
misskey

misskey · 13.0.0 · update beta41
misskey

misskey · 13.0.0 · update beta42
misskey

misskey · 13.0.0 · update beta43
misskey

misskey · 13.0.0 · update rc1
misskey

misskey · 13.0.0 · update rc10
misskey

misskey · 13.0.0 · update rc11
misskey

misskey · 13.0.0 · update rc2
misskey

misskey · 13.0.0 · update rc3
misskey

misskey · 13.0.0 · update rc4
misskey

misskey · 13.0.0 · update rc5
misskey

misskey · 13.0.0 · update rc6
misskey

misskey · 13.0.0 · update rc7
misskey

misskey · 13.0.0 · update rc8
misskey

misskey · 13.0.0 · update rc9
misskey

misskey · >= 2025.9.1, < 2025.12.0-alpha.2
misskey-dev

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as none; integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-307, CWE-1188
CCR priority
26.1 /100 (P4)
CVSS 3.1
6.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L · NVD
EPSS
0.00339 · percentile 0.25487 · 2026-10-13
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2025-66482.html