Skip to content
OpenAdvisories
High WID-SEC-2026-3173 13 CVEs

MISP: Mehrere Schwachstellen

Published Sep 3, 2026 · Updated Sep 6, 2026 · Revision 2 · de-DE

Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Sicherheitsmechanismen zu umgehen, Informationen offenzulegen, Daten oder Sitzungen zu manipulieren und die Verfügbarkeit zu beeinträchtigen.

Product

MISP ist eine Open-Source-Plattform für den Informationsaustausch über Bedrohungen.

Vulnerabilities 13

  • Critical 9.5
    CVE-2026-85216

    MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials

    MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials. The custom LdapAuthenticate and LinOTPAuthenticate components replace CakePHP's FormAuthenticate…

    MISP MISP
  • High 8.8
    CVE-2026-85236

    MISP cullEmptyEvents CSRF Allows Irreversible Deletion of Events via GET Request

    A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepting HTTP GET requests. Because bodyless GET requests are not subject to CakePHP's C…

    MISP MISP
  • High 8.6
    CVE-2026-85237

    Missing Rate Limiting in Email OTP Verification Allows Brute-Force Authentication Bypass

    A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts. The email_otp() endpoint did not apply brute-force protection when validating submitted OTP v…

    MISP MISP
  • High 8.6
    CVE-2026-85546

    MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

    MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the __initialiseSGQuickEdit() helper, where the HTTP method validation intended to …

    MISP MISP
  • High 8.3
    CVE-2026-85538

    MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes

    An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required perm_modify or perm_modify_org permissions. The affected attribute deletion paths relied on organization membership chec…

    MISP MISP
  • High 7.6
    CVE-2026-85221

    MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks

    MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification u…

    MISP MISP
  • High 7.6
    CVE-2026-85238

    Session Fixation in MISP CustomAuth Authentication Allows Session Hijacking

    MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a user was successfully authenticated through CustomAuth, MISP stored the authenticated user identity in the existing session without first rot…

    MISP MISP
  • High 7.6
    CVE-2026-85533

    MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter

    An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was authorized to use the referenced Sharing Group. In several attribute and Galaxy Cluster creation and editing workflows, validation of …

    MISP MISP
  • High 7.1
    CVE-2026-85239

    MISP Event Template Definition Validation Bypass Allows Persistent Denial of Service

    A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition field. The EventTemplate::beforeValidate() method only performed semantic valid…

    MISP MISP
  • Medium 6.2
    CVE-2026-85547

    Cross-Site Request Forgery via Attacker-Controlled REST Detection in MISP

    A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disabled based on whether an incoming request was identified as a REST request. MISP's REST detection can be influenced by request properties such…

    MISP MISP
  • Medium 6.1
    CVE-2026-85227

    Reflected Cross-Site Scripting in MISP Event Filtering via taggedAttributes and galaxyAttachedAttributes Parameters

    MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters were inserted into the query-builder rules without HTML escaping before being s…

    MISP MISP
  • Medium 5.3
    CVE-2026-85226

    MISP OnDemand Correlation Engine Missing Access Control Allows Disclosure of Restricted Correlations

    MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, sharing group, organization, or other access-control restrictions associated wit…

    MISP MISP
  • Medium 5.3
    CVE-2026-85230

    MISP Dashboard Button Widget Allows Persistent JavaScript URL Injection

    A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and were not validated when the configuration was saved. As a result, an authentica…

    MISP MISP

Revision history

  1. #2

    CVE ergänzt

  2. #1

    Initiale Fassung

References