MMISP

Products

Exploited and recent CVEs

• CVE-2026-118173 Medium 6.1 MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement 0.3%
• CVE-2026-116469 High 7.1 MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding 0.4%
• CVE-2026-116372 High 7.7 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules 0.4%
• CVE-2026-112991 Medium 6.3 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url() 0.3%
• CVE-2026-112192 Medium 5.3 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings 0.4%
• CVE-2026-112188 High 7.1 MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution 0.3%
• CVE-2026-112184 Medium 4.8 MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels 0.4%
• CVE-2026-112183 Medium 4.8 MISP CSS Injection via Remote Tag Colour in Event Preview 0.3%
• CVE-2026-112180 Medium 5.1 MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records 0.3%
• CVE-2026-112179 Medium 5.3 MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances 0.3%
• CVE-2026-112178 High 7.1 MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control 0.2%
• CVE-2026-107278 Medium 5.3 MISP Object Sync Drops Objects and Attributes When Description Is Empty 0.3%
• CVE-2026-107276 Medium 6.3 MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests 0.2%
• CVE-2026-107180 High 7.1 MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances 0.3%
• CVE-2026-107175 Medium 5.3 MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes 0.2%
• CVE-2026-106513 Medium 6.9 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change 0.6%
• CVE-2026-106512 High 8.4 MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS 0.3%
• CVE-2026-104914 Medium 5.3 MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View 0.2%
• CVE-2026-104912 High 7.1 MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data 0.2%
• CVE-2026-104910 Medium 5.3 MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization 0.3%
• CVE-2026-104908 High 7.1 MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging 0.3%
• CVE-2026-104907 Medium 4.8 MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler 0.4%
• CVE-2026-104906 Medium 6.2 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output 0.4%
• CVE-2026-104901 Medium 5.1 MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server 0.3%
• CVE-2026-104900 Medium 5.3 MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index 0.4%
• CVE-2026-103858 Medium 5.3 MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions 0.2%
• CVE-2026-103664 Medium 4.8 MISP Reflected Cross-Site Scripting via Unsanitized Analyst Data Seed Parameter 0.3%
• CVE-2026-103662 Medium 5.1 MISP Reflected XSS in Taxonomy Tag Confirmation Forms 0.3%
• CVE-2026-103659 High 7.1 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes 0.2%
• CVE-2026-103655 Critical 9.3 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period 0.4%