Skip to content
OpenAdvisories

Vendor

MISP

183 known vulnerabilities.

Products

MISP 150 cti-transmute 17 misp-modules 6 misp-stix 4 misp-guard 3 sachertortephp 2 bsimvis 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-56423 Public exploit

    MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

    MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelection handlers authorized deletion using broad role-level permissions instead of validating authorization for each selecte…

    MISP MISP