[ Vendor · 35 CVEs ]
MISP
CVEs affecting MISP published in the last 30 days, plus any MISP CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112991 | 19 Oct 2026 | CVSS 6.3 | misp-modulesThe html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation… | |
| CVE-2026-112184 | 19 Oct 2026 | CVSS 4.8 | MISPMISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules… | |
| CVE-2026-112188 | 19 Oct 2026 | CVSS 7.1 | MISPMISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that… | |
| CVE-2026-112192 | 19 Oct 2026 | CVSS 5.3 | MISPMISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it… | |
| CVE-2026-112183 | 19 Oct 2026 | CVSS 4.8 | MISPMISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour… | |
| CVE-2026-112178 | 19 Oct 2026 | CVSS 7.1 | MISPMISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object… | |
| CVE-2026-112179 | 19 Oct 2026 | CVSS 5.3 | MISPIn MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of… | |
| CVE-2026-112180 | 19 Oct 2026 | CVSS 5.1 | MISPMISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the… | |
| CVE-2026-107276 | 7 Oct 2026 | CVSS 6.3 | MISPMISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are… | |
| CVE-2026-107278 | 7 Oct 2026 | CVSS 5.3 | MISPMISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on… | |
| CVE-2026-107180 | 7 Oct 2026 | CVSS 7.1 | MISPOn MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup… | |
| CVE-2026-107175 | 7 Oct 2026 | CVSS 5.3 | MISPMISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when an event's distribution… | |
| CVE-2026-106512 | 6 Oct 2026 | CVSS 8.4 | MISP sachertortephpThe CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a… | |
| CVE-2026-106513 | 6 Oct 2026 | CVSS 6.9 | MISPMISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the… | |
| CVE-2026-104912 | 2 Oct 2026 | CVSS 7.1 | MISPMISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers… | |
| CVE-2026-104914 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for… | |
| CVE-2026-104906 | 2 Oct 2026 | CVSS 6.2 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of… | |
| CVE-2026-104907 | 2 Oct 2026 | CVSS 4.8 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP server is configured, the… | |
| CVE-2026-104908 | 2 Oct 2026 | CVSS 7.1 | MISPMISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new… | |
| CVE-2026-104910 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given… | |
| CVE-2026-104900 | 2 Oct 2026 | CVSS 5.3 | MISPMISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The count field template… | |
| CVE-2026-104901 | 2 Oct 2026 | CVSS 5.1 | MISPMISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translator page, the application… | |
| CVE-2026-103858 | 1 Oct 2026 | CVSS 5.3 | MISPMISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an… | |
| CVE-2026-103659 | 1 Oct 2026 | CVSS 7.1 | MISPMISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application… | |
| CVE-2026-103662 | 1 Oct 2026 | CVSS 5.1 | MISPMISP contains a reflected cross-site scripting (XSS) vulnerability in the legacy taxonomy tag management confirmation forms (add tag and disable… | |
| CVE-2026-103664 | 1 Oct 2026 | CVSS 4.8 | MISPMISP contains a reflected cross-site scripting (XSS) vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via… | |
| CVE-2026-103655 | 1 Oct 2026 | CVSS 9.3 | MISPMISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more… | |
| CVE-2026-103651 | 1 Oct 2026 | CVSS 7.6 | MISPMISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of… | |
| CVE-2026-103388 | 30 Sep 2026 | CVSS 6.2 | MISPMISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER_VALIDATE_URL validation… | |
| CVE-2026-103389 | 30 Sep 2026 | CVSS 6.2 | MISPMISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy object was persisted… | |
| CVE-2026-103321 | 30 Sep 2026 | CVSS 8.3 | MISPMISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and… | |
| CVE-2026-103239 | 30 Sep 2026 | CVSS 8.6 | MISPMISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full… | |
| CVE-2026-103235 | 30 Sep 2026 | CVSS 8.7 | MISPMISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request… | |
| CVE-2026-103237 | 30 Sep 2026 | CVSS 8.3 | MISPMISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute… | |
| CVE-2026-97863 | 25 Sep 2026 | CVSS 6.3 | misp-modulesThe cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to and calls the Cisco fireSIGHT… |