Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MISP — Vulnerabilities & Security Advisories 183

Browse all 183 CVE security advisories affecting MISP. AI-powered Chinese analysis, POCs, and references for each vulnerability.

MISP is an open-source threat intelligence platform designed for sharing cyber threat information between organizations. Historically, vulnerabilities in MISP have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation or access control issues. The platform's security characteristics emphasize collaborative information sharing, though past incidents have highlighted risks in default configurations and plugin vulnerabilities. With 9 CVEs on record, MISP remains widely adopted for threat intelligence sharing, requiring proper hardening and regular updates to mitigate potential exploitation risks. Organizations should implement strict access controls and validate all shared data to prevent misuse.

CVE ID Title CVSS Severity Published
CVE-2026-103655 MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period — MISP CWE-294 9.3 Critical 2026-10-01
CVE-2026-103651 MISP HOTP Token Replay via Stale Session-Cached Counter Allows Second-Factor Authentication Bypass — MISP CWE-362 7.6 High 2026-10-01
CVE-2026-103389 MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph — MISP CWE-79 6.2 Medium 2026-09-30
CVE-2026-103388 MISP Stored Cross-Site Scripting via JavaScript URL in Galaxy Cluster Source Field — MISP CWE-79 6.2 Medium 2026-09-30
CVE-2026-103321 MISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview Image — MISP CWE-79 8.3 High 2026-09-30
CVE-2026-103239 MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection — MISP CWE-284 8.6 High 2026-09-30
CVE-2026-103237 MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows — MISP CWE-639 8.3 High 2026-09-30
CVE-2026-103235 MISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events — MISP CWE-915 8.7 High 2026-09-30
CVE-2026-97863 misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values — misp-modules CWE-78 6.3 Medium 2026-09-25
CVE-2026-95806 MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths — MISP CWE-502 7.7 High 2026-09-22
CVE-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction — MISP CWE-285 5.3 Medium 2026-09-22
CVE-2026-95754 MISP: Disabled-user check ineffective in pre-authentication TOTP login branch — MISP CWE-285 6.9 Medium 2026-09-22
CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name — MISP CWE-200 5.1 Medium 2026-09-22
CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check — MISP CWE-22 5.1 Medium 2026-09-22
CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name — MISP CWE-22 5.3 Medium 2026-09-22
CVE-2026-95697 MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata — MISP CWE-862 5.3 Medium 2026-09-22
CVE-2026-95693 MISP Information Disclosure via Forged Upload Path — MISP CWE-200 5.3 Medium 2026-09-22
CVE-2026-95685 MISP Missing Authorization on replaceSuggestionInReport Event Report Action — MISP CWE-862 5.3 Medium 2026-09-22
CVE-2026-95683 MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL — MISP CWE-862 5.3 Medium 2026-09-22
CVE-2026-95682 MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View — MISP CWE-79 4.8 Medium 2026-09-22
CVE-2026-95679 MISP Unauthenticated Blind SSRF via XML Body Processing — MISP CWE-918 6.9 Medium 2026-09-22
CVE-2026-95674 MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation — MISP CWE-20 5.3 Medium 2026-09-22
CVE-2026-95671 MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add — MISP CWE-862 5.3 Medium 2026-09-22
CVE-2026-95667 MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials — MISP CWE-732 6.9 Medium 2026-09-22
CVE-2026-95665 MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON — MISP CWE-79 5.1 Medium 2026-09-22
CVE-2026-95661 MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List — MISP CWE-79 5.1 Medium 2026-09-22
CVE-2026-95659 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread — MISP CWE-79 4.8 Medium 2026-09-22
CVE-2026-95658 MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules — MISP CWE-352 6.9 Medium 2026-09-22
CVE-2026-94404 MISP CSRF vulnerability allows unauthorized attribute modification — MISP CWE-352 7.1 High 2026-09-21
CVE-2026-94401 MISP Arbitrary Local File Read and SSRF via MISP Export Upload — MISP CWE-918 8.3 High 2026-09-21

This page lists every published CVE security advisory associated with MISP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.