Misp

This hub aggregates every CVE we track for Misp, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Misp.

• CVE-2026-95806MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem pathsSep 22, 2026
• CVE-2026-95805MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restrictionSep 22, 2026
• CVE-2026-95754MISP: Disabled-user check ineffective in pre-authentication TOTP login branchSep 22, 2026
• CVE-2026-95703MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_nameSep 22, 2026
• CVE-2026-95701MISP Path Traversal via Organization Name in Org-Statistics Logo CheckSep 22, 2026
• CVE-2026-95698MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization NameSep 22, 2026
• CVE-2026-95697MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization MetadataSep 22, 2026
• CVE-2026-95693MISP Information Disclosure via Forged Upload PathSep 22, 2026
• CVE-2026-95685MISP Missing Authorization on replaceSuggestionInReport Event Report ActionSep 22, 2026
• CVE-2026-95683MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACLSep 22, 2026
• CVE-2026-95682MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email ViewSep 22, 2026
• CVE-2026-95679MISP Unauthenticated Blind SSRF via XML Body ProcessingSep 22, 2026
• CVE-2026-95674MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validationSep 22, 2026
• CVE-2026-95671MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/addSep 22, 2026
• CVE-2026-95667MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive CredentialsSep 22, 2026