Skip to content
OpenAdvisories
High WID-SEC-2026-3490 11 CVEs

MISP: Mehrere Schwachstellen

Published Sep 21, 2026 · Updated Sep 21, 2026 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen sowie Cross-Site-Scripting-Angriffe durchzuführen.

Product

MISP ist eine Open-Source-Plattform für den Informationsaustausch über Bedrohungen.

Vulnerabilities 11

  • High 8.7
    CVE-2026-94381

    MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

    MISP has a security issue that can let a user gain more access than their API key is supposed to allow. A read-only API key should only let someone view information. However, after logging in with such a key, a specific MISP function could accidentally restor…

    MISP MISP
  • High 8.6
    CVE-2026-94383

    MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension

    The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename() to strip path components and a check for empty or dot values. A site administrator cou…

    MISP MISP
  • High 8.3
    CVE-2026-94374

    MISP: IDOR via Client-Supplied Report ID in Module Results Processing Allows Reparenting and Overwriting of Other Events' Reports

    MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing module results, the code iterates over EventReport entries supplied in the resolved data and saves each one. Unlike the …

    MISP MISP
  • High 8.3
    CVE-2026-94401

    MISP Arbitrary Local File Read and SSRF via MISP Export Upload

    MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. When importing an XML file, MISP did not properly verify that the uploaded content was actually XML. Because of t…

    MISP MISP
  • High 7.1
    CVE-2026-94404

    MISP CSRF vulnerability allows unauthorized attribute modification

    MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change. The affected function did not properly enforce MISP’s usual protection against forged req…

    MISP MISP
  • Medium 6.9
    CVE-2026-94379

    MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)

    The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist approach, checking only for specific HTTP methods (POST and PUT) before enforcing br…

    MISP MISP
  • Medium 6.4
    CVE-2026-94393

    MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport

    When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the same event. As a result, a user who has editing rights on one event could potentia…

    MISP MISP
  • Medium 6.3
    CVE-2026-94277

    Stored Cross-Site Scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name

    MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galaxy name directly into HTML output via sprintf() without any HTML encoding. An authenticated user holding the perm_galaxy_editor permission can create or modify a…

    MISP MISP
  • Medium 6.3
    CVE-2026-94372

    Stored Cross-Site Scripting via Unescaped Galaxy Cluster Tag Names in MISP Default Theme Galaxies Index

    MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters during synchronization, it renders sample tag names in an informational notice d…

    MISP MISP
  • Medium 6.3
    CVE-2026-94373

    MISP DOM-based Cross-Site Scripting via innerHTML in Contextual Menu

    MISP contains a DOM-based cross-site scripting (XSS) vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML <option> elements by assigning user-controllable values to the innerHTML property. Because innerHTML parses…

    MISP MISP
  • Medium 6.3
    CVE-2026-94394

    MISP ObjectReferencesController: Granular Distribution and Sharing Group Restrictions Bypassed When Adding Object References

    When a regular user adds a reference between objects or attributes, MISP checks whether the user can access the overall event, but it does not always check whether the individual pieces of data are also allowed for that user. Because of this, someone who can …

    MISP MISP

Revision history

  1. #1

    Initiale Fassung

References