Misp vulnerabilities
183 CVEs and advisories name Misp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-54361MISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records
- CVE-2026-54360MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups
- CVE-2026-54359MISP automation endpoints may be exposed to CSRF when Sec-Fetch-Site protection is disabled by default
- CVE-2026-54358MISP organization administrators can target site administrator accounts for password reset
- CVE-2026-54357MISP improper authorization allows organization administrators to modify site administrator user settings
- CVE-2026-53693MISP BSimVis stored cross-site scripting in tag and cluster rendering paths via unescaped tag metadata and UI labels
- CVE-2026-10868MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification
- CVE-2026-10864MISP Dashboard widget field selection may expose restricted user and organisation data
- CVE-2026-10863MISP User-controlled order parameter in correlations over-correlation endpoint
- CVE-2026-10860MISP CRUDComponent delete validation bypass via operator precedence error
- CVE-2026-10861MISP post-login open redirect via pre_login_requested_url
- CVE-2026-10856Open redirect in MISP dashboard button widget URL handling
- CVE-2026-10855MISP Event template importer authorization bypass
- CVE-2026-10854Unauthorized exposure of private galaxies in MISP event template creation
- CVE-2026-10611OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled
- CVE-2026-9806Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names
- CVE-2026-9137CSP Report Endpoint Log Flooding in MISP via Incorrect Size Limit
- CVE-2026-9136Unauthorized ShadowAttribute modification in MISP via client-supplied identifier
- CVE-2026-9084MISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations
- CVE-2026-44379MISP: Improper UUID validation in MISP Collections
- CVE-2026-44380MISP: Improper access control in auth key reset allows privilege escalation to site administrator
- CVE-2026-44381MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings
- CVE-2026-44363Unsafe remote resource fetching in expansion misp-modules
- CVE-2026-44364misp-modules website - Missing CSRF protection in the website home blueprint
- CVE-2026-8080MISP core - Stored XSS in MISP template (old engine) element attribute type
- CVE-2026-39962LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable
- CVE-2025-67906In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
- CVE-2025-66386app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.
- CVE-2025-66384app/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded file validity, related to tmp_name.
- CVE-2024-58130In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON respon