Misp vulnerabilities
183 CVEs and advisories name Misp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73158cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon
- CVE-2026-73157cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata
- CVE-2026-73156cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data
- CVE-2026-73155cti-transmute Missing Authorization Allows Reactions to Private Comments
- CVE-2026-73140cti-transmute Evaluation Report Exports Expose Private Comments and Author Information
- CVE-2026-72760cti-transmute Following List Exposes User Email Addresses to Authenticated Users
- CVE-2026-72759cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion
- CVE-2026-72751Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content
- CVE-2026-71502Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute
- CVE-2026-69082Cross-Site Request Forgery in the Administrative User Deletion Endpoint
- CVE-2026-69079Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute
- CVE-2026-69078Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering
- CVE-2026-67178Open Redirect in MISP Installer-Generated Apache Configuration
- CVE-2026-62143Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses
- CVE-2026-61474MISP: Improper sharing group authorization check when adding attributes
- CVE-2026-60125importModule function in MISP ignores per-organisation import module restrictions
- CVE-2026-60124MISP importModule missing authorization allows read-only users to modify events via misp_standard imports
- CVE-2026-56447MISP remote code execution via arbitrary rdkafka configuration path
- CVE-2026-56446Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP
- CVE-2026-56425MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
- CVE-2026-56424Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models
- CVE-2026-56423MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints
- CVE-2026-56422MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields
- CVE-2026-54398MISP object edit authorization bypass allows unauthorized sharing group assignment
- CVE-2026-54397MISP event editing allows unauthorized assignment to undisclosed sharing groups
- CVE-2026-54396MISP AuthKey edit endpoint allows authenticated user email enumeration
- CVE-2026-54395MISP UiBeta event index reflected XSS in advanced filter popup
- CVE-2026-54394MISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files
- CVE-2026-54393MISP Overmind theme stored XSS via unvalidated homepage setting
- CVE-2026-54362MISP template builder exposes non-visible custom galaxies across organisations