DeutschShown in its original language — a full translation is planned for a future version.
MISP: Mehrere Schwachstellen
view advisory published 2026-09-03
Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Sicherheitsmechanismen zu umgehen, Informationen offenzulegen, Daten oder Sitzungen zu manipulieren und die Verfügbarkeit zu beeinträchtigen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-85547US | — | — | ||
A cross-site request forgery (CSRF) vulnerability exists in MISP due to form-security and CSRF protections being disabled based on whether an incoming request was identified as a R… | ||||
| CVE-2026-85546US | — | — | ||
MISP contains a cross-site request forgery (CSRF) vulnerability in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions share the… | ||||
| CVE-2026-85538US | —OT elevated | — | ||
An incorrect authorization vulnerability in MISP allowed authenticated users to delete attributes from events despite lacking the required perm_modify or perm_modify_org permission… | ||||
| CVE-2026-85533US | —OT elevated | — | ||
An authorization flaw in MISP allowed an authenticated user to submit a sharing_group_id without verifying that the user was authorized to use the referenced Sharing Group.
In sev… | ||||
| CVE-2026-85239US | medium6.5 | — | ||
A vulnerability in MISP's event template handling allowed an authenticated user with permission to create or modify event templates to bypass validation of the template definition… | ||||
| CVE-2026-85238US | medium6.8 | — | ||
MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom configuration) flow. When a user was successfully authenticated through CustomAuth, MISP s… | ||||
| CVE-2026-85237US | high8.1 | — | ||
A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unrestricted number of OTP verification attempts.
The email_ot… | ||||
| CVE-2026-85236US | high8.8 | — | ||
A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed a state-changing and irreversible operation while accepting… | ||||
| CVE-2026-85230US | medium5.4 | — | ||
A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configuration. Dashboard widget URLs were validated only when the widget was rendered and… | ||||
| CVE-2026-85227US | medium6.1 | — | ||
MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering query builder. The taggedAttributes and galaxyAttachedAttributes URL parameters… | ||||
| CVE-2026-85226US | medium4.3OT elevated | — | ||
MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calculated solely from matching attribute values without applying the distribution, s… | ||||
| CVE-2026-85221US | critical9.1 | — | ||
MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to nul… | ||||
| CVE-2026-85216US | critical9.8 | — | ||
MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient validation of user-supplied credentials.
The custom LdapA… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
- GitHub Advisory Database vom 2026-09-03external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan