Vulnerabilidades en MISP
182 resultadosCVE-2026-104906MEDIUMMISP TAXII Object Viewer Stored XSS via Unescaped JSON OutputEPSS 0.4%CVE-2026-103321HIGHMISP Stored Cross-Site Scripting (XSS) via Unvalidated Event Graph Preview ImageEPSS 0.4%CVE-2026-104900MEDIUMMISP Stored XSS via Unescaped Count Field Value in Remote Event Preview IndexEPSS 0.4%CVE-2026-85547MEDIUMCross-Site Request Forgery via Attacker-Controlled REST Detection in MISPEPSS 0.4%CVE-2026-10611HIGHOTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabledEPSS 0.4%CVE-2026-112184MEDIUMMISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form LabelsEPSS 0.4%CVE-2026-104907MEDIUMMISP: JavaScript Injection via Remote Tag ID in Event Preview Inline HandlerEPSS 0.4%CVE-2026-88915HIGHMISP Event Template Instantiation Bypasses Sharing Group and Tagging AuthorizationEPSS 0.4%CVE-2026-94394MEDIUMMISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object ReferencesEPSS 0.4%CVE-2026-73140MEDIUMcti-transmute Evaluation Report Exports Expose Private Comments and Author InformationEPSS 0.4%CVE-2026-60125MEDIUMimportModule function in MISP ignores per-organisation import module restrictionsEPSS 0.4%CVE-2026-95685MEDIUMMISP Missing Authorization on replaceSuggestionInReport Event Report ActionEPSS 0.4%CVE-2026-91851MEDIUMMISP Dashboard Template ACL Bypass Due to VARCHAR-to-Integer Type Coercion in Permission Flag ComparisonEPSS 0.4%CVE-2026-39962HIGHLDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variableEPSS 0.4%CVE-2026-73155MEDIUMcti-transmute Missing Authorization Allows Reactions to Private CommentsEPSS 0.4%CVE-2026-91846HIGHMISP Collection Element Add Missing Authorization on Referenced Object UUIDEPSS 0.4%CVE-2026-86342MEDIUMMISP Freetext Feed Preview Improper Authorization Exposes Restricted Event and Feed InformationEPSS 0.3%CVE-2026-86408HIGHMISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected EventsEPSS 0.3%CVE-2026-103662MEDIUMMISP Reflected XSS in Taxonomy Tag Confirmation FormsEPSS 0.3%CVE-2026-85238HIGHSession Fixation in MISP CustomAuth Authentication Allows Session HijackingEPSS 0.3%