Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

cti-transmute — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in cti-transmute, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the cti-transmute product, specifically categorized under the weakness type of insecure data handling and tagged with the identifier cti-transmute-flaw. The collection encompasses a comprehensive history of reported issues, ranging from initial disclosures in early 2021 through the most recent patches issued in late 2023, covering everything from buffer overflows to logic errors. Visitors can utilize this resource to track the vendor's official security advisories, gain a deeper understanding of the specific weakness class prevalent in this software suite, or review the complete vulnerability history of the cti-transmute product to assess its long-term security posture. The data presented here is strictly factual, derived from public advisories and technical reports, ensuring an unbiased view of the product's security evolution without promotional language or unnecessary commentary. By consolidating these records, the page serves as a central reference point for security analysts, system administrators, and developers who need to evaluate risk exposure or verify the status of previously identified defects. This aggregation supports proactive defense strategies by enabling users to correlate historical flaws with current deployment configurations, ultimately facilitating more informed decision-making regarding system hardening and patch management for the cti-transmute ecosystem.

Vendor: misp

CVE ID Title CVSS Severity Published
CVE-2026-73162 cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes CWE-352 5.3 Medium 2026-08-11
CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting CWE-79 5.1 Medium 2026-08-11
CVE-2026-73160 cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses CWE-918 8.7 High 2026-08-11
CVE-2026-73159 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface CWE-79 5.1 Medium 2026-08-11
CVE-2026-73158 cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon CWE-79 5.1 Medium 2026-08-11
CVE-2026-73157 cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata CWE-79 2.3 Low 2026-08-11
CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data CWE-79 5.3 Medium 2026-08-11
CVE-2026-73155 cti-transmute Missing Authorization Allows Reactions to Private Comments CWE-862 5.3 Medium 2026-08-11
CVE-2026-73140 cti-transmute Evaluation Report Exports Expose Private Comments and Author Information CWE-862 5.3 Medium 2026-08-11
CVE-2026-72760 cti-transmute Following List Exposes User Email Addresses to Authenticated Users CWE-200 5.3 Medium 2026-08-10
CVE-2026-72759 cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion CWE-862 6.9 Medium 2026-08-10
CVE-2026-72751 Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content CWE-79 5.1 Medium 2026-08-10
CVE-2026-71502 Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute CWE-79 5.1 Medium 2026-08-06
CVE-2026-69082 Cross-Site Request Forgery in the Administrative User Deletion Endpoint CWE-352 8.8 High 2026-08-03
CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute CWE-770 8.7 High 2026-08-03
CVE-2026-69078 Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering CWE-918 8.8 High 2026-08-03
CVE-2026-9806 Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names CWE-79 - - 2026-05-28

All 17 known CVE vulnerabilities affecting cti-transmute with full Chinese analysis, references, and POCs where available.