[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-qofrEhb0Ffsdiqxiy-k7eUq1_CWdKk-apNEASw2ld0":3,"g5a-risk:CVE-2026-116485":115},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":45,"references":46,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":29,"otxData":29,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":103,"notableEvents":104},"CVE-2026-116485","What is CVE-2026-116485?","danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to \u002Fapi\u002Fenv\u002Fset, \u002Fapi\u002Fenv\u002Fadd, or \u002Fapi\u002Fenv\u002Fdel to set ADMIN_TOKEN, lock out operators, redirect OTHER_SERVER or PROXY_URL for SSRF, and trigger redeployment.","danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when...","2026-10-26T14:16:37.04","2026-10-26T18:41:21.45",9.3,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"disclosure@vulncheck.com","Primary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","NONE","UNCHANGED","HIGH",9.8,"CRITICAL",null,3.9,5.9,[],[],[35],{"Source":17,"Type":36,"CVSSData":37},"Secondary",{"Version":38,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":22,"AttackComplexity":23,"AttackRequirements":24,"PrivilegesRequired":24,"UserInteraction":24,"VulnConfidentialityImpact":26,"VulnIntegrityImpact":26,"VulnAvailabilityImpact":26,"SubConfidentialityImpact":24,"SubIntegrityImpact":24,"SubAvailabilityImpact":24,"ExploitMaturity":39,"ConfidentialityRequirement":39,"IntegrityRequirement":39,"AvailabilityRequirement":39,"ModifiedAttackVector":39,"ModifiedAttackComplexity":39,"ModifiedAttackRequirements":39,"ModifiedPrivilegesRequired":39,"ModifiedUserInteraction":39,"ModifiedVulnConfidentialityImpact":39,"ModifiedVulnIntegrityImpact":39,"ModifiedVulnAvailabilityImpact":39,"ModifiedSubConfidentialityImpact":39,"ModifiedSubIntegrityImpact":39,"ModifiedSubAvailabilityImpact":39,"Safety":39,"Automatable":39,"Recovery":39,"ValueDensity":39,"VulnerabilityResponseEffort":39,"ProviderUrgency":39},"4.0","NOT_DEFINED",0.02349,[29,29,29,29,42,40,40],0.00668,"Critical",[],0,[47,51,54,57,60],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Fhuangxd-\u002Fdanmu_api","GitHub",[],{"url":52,"source":49,"tags":53},"https:\u002F\u002Fgithub.com\u002Fhuangxd-\u002Fdanmu_api\u002Fblob\u002F5ef63a01bae7c4bad4dcd7bafbbcdcf33aa82564\u002Fdanmu_api\u002Fworker.js#L223-L244",[],{"url":55,"source":49,"tags":56},"https:\u002F\u002Fgithub.com\u002Fhuangxd-\u002Fdanmu_api\u002Fcommit\u002F6e93478064a0ce4e7ed3bc2eae88adaad1b7ab02",[],{"url":58,"source":49,"tags":59},"https:\u002F\u002Fgithub.com\u002Fhuangxd-\u002Fdanmu_api\u002Fissues\u002F531",[],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fdanmu-api-before-1.21.7-authentication-bypass-via-default-token-in-env-endpoints","Vulncheck",[],5,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2026-116485? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-116485, a critical severity cyber security vulnerability from 2026. danmu_api before 1.21.7 contains an authentication byp...","CVE-2026-116485, CVE-2026-116485 vulnerability, CVE-2026-116485 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation","\u002Fwhat-is\u002Fcve-2026-116485",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-116485","Cybersecurity","CVE-2026-116485, CVE-2026-116485 vulnerability, CVE-2026-116485 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[],[],[105],{"id":106,"eventType":107,"eventTime":108,"details":109,"label":110,"color":111},"9951ed38-a62c-45d6-ad9a-b62637c3e845","NEW_NVD","2026-10-27T04:02:15.999221+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":113,"version":114},1793385250285,"2.0",{"score":116,"band":117,"action":118,"scoredAt":119},56,"Medium","Plan remediation","2026-10-30T07:23:42.903885+00:00"]