Skip to content
OpenAdvisories

Vendor

MISP

183 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-9806 Public exploit

    Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names

    A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release. Notification messages containing user-controlled convert names were rendered in the notification bell dropdown using …

  • Medium 6.8
    CVE-2026-8080 Public exploit

    MISP core - Stored XSS in MISP template (old engine) element attribute type

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS. This issue affects MISP before 2.5.37. A stored cross-site scripting vulnerability exists in the template element attribute ha…