Skip to content
OpenAdvisories

Vendor

MISP

183 known vulnerabilities.

Products

MISP 150 cti-transmute 17 misp-modules 6 misp-stix 4 misp-guard 3 sachertortephp 2 bsimvis 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-86441

    MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

    Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not honor Security.hide_organisation_index_from_users. As a result, authenticated user…

    MISP MISP
  • Low 2.3
    CVE-2026-86418

    MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

    Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields inclu…

    MISP MISP
  • Low 2.3
    CVE-2026-73157

    cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata

    Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface using HTML interpolation. Because fields such as event IDs, event information, organization names, tags, tag colors, TLP labels, distribution …

    MISP cti-transmute