MISP cti-transmute

CVE-2026-73162 Medium 5.3 cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes 0.2%
CVE-2026-73161 Medium 5.1 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting 0.4%
CVE-2026-73160 High 8.7 cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses 0.4%
CVE-2026-73159 Medium 5.1 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface 0.4%
CVE-2026-73158 Medium 5.1 cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon 0.4%
CVE-2026-73157 Low 2.3 cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata 0.4%
CVE-2026-73156 Medium 5.3 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data 0.4%
CVE-2026-73155 Medium 5.3 cti-transmute Missing Authorization Allows Reactions to Private Comments 0.4%
CVE-2026-73140 Medium 5.3 cti-transmute Evaluation Report Exports Expose Private Comments and Author Information 0.4%
CVE-2026-72760 Medium 5.3 cti-transmute Following List Exposes User Email Addresses to Authenticated Users 0.4%
CVE-2026-72759 Medium 6.9 cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion 0.5%
CVE-2026-72751 Medium 5.1 Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content 0.5%
CVE-2026-71502 Medium 5.1 Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute 0.7%
CVE-2026-69082 High 8.8 Cross-Site Request Forgery in the Administrative User Deletion Endpoint 0.3%
CVE-2026-69079 High 8.7 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute 0.5%
CVE-2026-69078 High 8.8 Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering 0.4%
CVE-2026-9806 Medium 6.3 Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names 0.3%