CVE-2026-62857: fedify >= 1.2.0, < 1.9.13, >= 1.10.0, < 1.10.12, >= 2.0.0, < 2.0.22, >= 2.1.0, < 2.1.18, >= 2.2.0, < 2.2.7, >= 2.3.0…

Affected technology

fedify · >= 1.2.0, < 1.9.13, >= 1.10.0, < 1.10.12, >= 2.0.0, < 2.0.22, >= 2.1.0, < 2.1.18, >= 2.2.0, < 2.2.7, >= 2.3.0, < 2.3.2
fedify-dev

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 8.8/10) rates confidentiality impact as high; integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.