Browse all 183 CVE security advisories affecting MISP. AI-powered Chinese analysis, POCs, and references for each vulnerability.
MISP is an open-source threat intelligence platform designed for sharing cyber threat information between organizations. Historically, vulnerabilities in MISP have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation or access control issues. The platform's security characteristics emphasize collaborative information sharing, though past incidents have highlighted risks in default configurations and plugin vulnerabilities. With 9 CVEs on record, MISP remains widely adopted for threat intelligence sharing, requiring proper hardening and regular updates to mitigate potential exploitation risks. Organizations should implement strict access controls and validate all shared data to prevent misuse.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-125871 | MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment — misp-modules CWE-918 | 6.3 | Medium | 2026-11-10 |
| CVE-2026-112991 | MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url() — misp-modules CWE-918 | 6.3 | Medium | 2026-10-19 |
| CVE-2026-97863 | misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values — misp-modules CWE-78 | 6.3 | Medium | 2026-09-25 |
| CVE-2026-62143 | Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses — misp-modules CWE-918 | - | - | 2026-07-13 |
| CVE-2026-44363 | Unsafe remote resource fetching in expansion misp-modules — misp-modules CWE-295 | - | - | 2026-05-13 |
| CVE-2026-44364 | misp-modules website - Missing CSRF protection in the website home blueprint — misp-modules CWE-352 | - | - | 2026-05-13 |
This page lists every published CVE security advisory associated with MISP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.