Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MISP — Vulnerabilities & Security Advisories 183

Browse all 183 CVE security advisories affecting MISP. AI-powered Chinese analysis, POCs, and references for each vulnerability.

MISP is an open-source threat intelligence platform designed for sharing cyber threat information between organizations. Historically, vulnerabilities in MISP have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation or access control issues. The platform's security characteristics emphasize collaborative information sharing, though past incidents have highlighted risks in default configurations and plugin vulnerabilities. With 9 CVEs on record, MISP remains widely adopted for threat intelligence sharing, requiring proper hardening and regular updates to mitigate potential exploitation risks. Organizations should implement strict access controls and validate all shared data to prevent misuse.

CVE ID Title CVSS Severity Published
CVE-2026-73158 cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon — cti-transmute CWE-79 5.1 Medium 2026-08-11
CVE-2026-73157 cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata — cti-transmute CWE-79 2.3 Low 2026-08-11
CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data — cti-transmute CWE-79 5.3 Medium 2026-08-11
CVE-2026-73155 cti-transmute Missing Authorization Allows Reactions to Private Comments — cti-transmute CWE-862 5.3 Medium 2026-08-11
CVE-2026-73140 cti-transmute Evaluation Report Exports Expose Private Comments and Author Information — cti-transmute CWE-862 5.3 Medium 2026-08-11
CVE-2026-72760 cti-transmute Following List Exposes User Email Addresses to Authenticated Users — cti-transmute CWE-200 5.3 Medium 2026-08-10
CVE-2026-72759 cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion — cti-transmute CWE-862 6.9 Medium 2026-08-10
CVE-2026-72751 Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content — cti-transmute CWE-79 5.1 Medium 2026-08-10
CVE-2026-71502 Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute — cti-transmute CWE-79 5.1 Medium 2026-08-06
CVE-2026-69082 Cross-Site Request Forgery in the Administrative User Deletion Endpoint — cti-transmute CWE-352 8.8 High 2026-08-03
CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute — cti-transmute CWE-770 8.7 High 2026-08-03
CVE-2026-69078 Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering — cti-transmute CWE-918 8.8 High 2026-08-03
CVE-2026-67178 Open Redirect in MISP Installer-Generated Apache Configuration — misp CWE-601 7.8 High 2026-07-28
CVE-2026-62143 Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses — misp-modules CWE-918 - - 2026-07-13
CVE-2026-61474 MISP: Improper sharing group authorization check when adding attributes — misp CWE-863 - - 2026-07-09
CVE-2026-60125 importModule function in MISP ignores per-organisation import module restrictions — misp CWE-863 - - 2026-07-08
CVE-2026-60124 MISP importModule missing authorization allows read-only users to modify events via misp_standard imports — misp CWE-862 - - 2026-07-08
CVE-2026-56447 MISP remote code execution via arbitrary rdkafka configuration path — misp CWE-829 - - 2026-06-22
CVE-2026-56446 Authenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP — misp CWE-94 - - 2026-06-22
CVE-2026-56425 MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection — misp CWE-384 - - 2026-06-22
CVE-2026-56424 Broken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models — misp CWE-639 - - 2026-06-22
CVE-2026-56423 MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints — misp CWE-862 - - 2026-06-22
CVE-2026-56422 MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields — misp CWE-639 - - 2026-06-22
CVE-2026-54398 MISP object edit authorization bypass allows unauthorized sharing group assignment — misp CWE-863 - - 2026-06-12
CVE-2026-54397 MISP event editing allows unauthorized assignment to undisclosed sharing groups — misp CWE-863 - - 2026-06-12
CVE-2026-54396 MISP AuthKey edit endpoint allows authenticated user email enumeration — misp CWE-200 - - 2026-06-12
CVE-2026-54395 MISP UiBeta event index reflected XSS in advanced filter popup — misp CWE-79 - - 2026-06-12
CVE-2026-54394 MISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files — misp CWE-22 - - 2026-06-12
CVE-2026-54393 MISP Overmind theme stored XSS via unvalidated homepage setting — misp CWE-79 - - 2026-06-12
CVE-2026-54362 MISP template builder exposes non-visible custom galaxies across organisations — misp CWE-863 - - 2026-06-12

This page lists every published CVE security advisory associated with MISP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.