Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

MISP — Vulnerabilities & Security Advisories 67

Browse all 67 CVE security advisories affecting MISP. AI-powered Chinese analysis, POCs, and references for each vulnerability.

MISP is an open-source threat intelligence platform designed for sharing cyber threat information between organizations. Historically, vulnerabilities in MISP have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation or access control issues. The platform's security characteristics emphasize collaborative information sharing, though past incidents have highlighted risks in default configurations and plugin vulnerabilities. With 9 CVEs on record, MISP remains widely adopted for threat intelligence sharing, requiring proper hardening and regular updates to mitigate potential exploitation risks. Organizations should implement strict access controls and validate all shared data to prevent misuse.

Found 17 results / 67Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2026-73162 cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes — cti-transmuteCWE-352 5.3 Medium2026-08-11
CVE-2026-73161 cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting — cti-transmuteCWE-79 5.1 Medium2026-08-11
CVE-2026-73160 cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses — cti-transmuteCWE-918 8.7 High2026-08-11
CVE-2026-73159 cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface — cti-transmuteCWE-79 5.1 Medium2026-08-11
CVE-2026-73158 cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon — cti-transmuteCWE-79 5.1 Medium2026-08-11
CVE-2026-73157 cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata — cti-transmuteCWE-79 2.3 Low2026-08-11
CVE-2026-73156 cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data — cti-transmuteCWE-79 5.3 Medium2026-08-11
CVE-2026-73155 cti-transmute Missing Authorization Allows Reactions to Private Comments — cti-transmuteCWE-862 5.3 Medium2026-08-11
CVE-2026-73140 cti-transmute Evaluation Report Exports Expose Private Comments and Author Information — cti-transmuteCWE-862 5.3 Medium2026-08-11
CVE-2026-72760 cti-transmute Following List Exposes User Email Addresses to Authenticated Users — cti-transmuteCWE-200 5.3 Medium2026-08-10
CVE-2026-72759 cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion — cti-transmuteCWE-862 6.9 Medium2026-08-10
CVE-2026-72751 Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content — cti-transmuteCWE-79 5.1 Medium2026-08-10
CVE-2026-71502 Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute — cti-transmuteCWE-79 5.1 Medium2026-08-06
CVE-2026-69082 Cross-Site Request Forgery in the Administrative User Deletion Endpoint — cti-transmuteCWE-352 8.8 High2026-08-03
CVE-2026-69079 Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute — cti-transmuteCWE-770 8.7 High2026-08-03
CVE-2026-69078 Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering — cti-transmuteCWE-918 8.8 High2026-08-03
CVE-2026-9806 Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names — cti-transmuteCWE-79--2026-05-28

This page lists every published CVE security advisory associated with MISP. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.