Skip to content
OpenAdvisories
Medium WID-SEC-2026-3729 8 CVEs

MISP: Mehrere Schwachstellen

Published Oct 4, 2026 · Updated Oct 4, 2026 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

Product

MISP ist eine Open-Source-Plattform für den Informationsaustausch über Bedrohungen.

Vulnerabilities 8

  • High 7.1
    CVE-2026-104908

    MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging

    MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag forced to of…

    MISP MISP
  • High 7.1
    CVE-2026-104912

    MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data

    MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers correlation lookups, the system authorized access to correlated attributes and events based on a stale distributi…

    MISP MISP
  • Medium 6.2
    CVE-2026-104906

    MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output

    MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can control o…

    MISP MISP
  • Medium 5.3
    CVE-2026-104900

    MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index

    MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with the ability…

    MISP MISP
  • Medium 5.3
    CVE-2026-104910

    MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization

    MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validating the c…

    MISP MISP
  • Medium 5.3
    CVE-2026-104914

    MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View

    MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for soft-deleted attributes (e.g., via the deleted-attributes search or the paginated attribute listing), the applicatio…

    MISP MISP
  • Medium 5.1
    CVE-2026-104901

    MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server

    MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translator page, the application queries linked (remote) MISP servers for corresponding event identifiers. The event ID returned by the remote serv…

    MISP MISP
  • Medium 4.8
    CVE-2026-104907

    MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler

    MISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was HTML-esc…

    MISP MISP

Revision history

  1. #1

    Initiale Fassung

References