DeutschShown in its original language — a full translation is planned for a future version.
MISP: Mehrere Schwachstellen
view advisory published 2026-09-15
Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand auszulösen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-92003US | — | — | ||
Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.
Two API authentication failure branches wrote directly to the Log model:… | ||||
| CVE-2026-92002US | — | — | ||
Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentica… | ||||
| CVE-2026-91859US | — | — | ||
Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception.
Because CakeErrorController extends AppController, exception rendering… | ||||
| CVE-2026-91857US | — | — | ||
Affected versions of MISP expose several state-changing controller actions without restricting them to POST.
The affected actions are:
- EventReportsController::purgeUnusedPi… | ||||
02
references
External citations — patches, advisories, analysis.
- EU Vulnerability Databse vom 2026-09-15external
- EU Vulnerability Databse vom 2026-09-15external
- EU Vulnerability Databse vom 2026-09-15external
- EU Vulnerability Databse vom 2026-09-15external
- GitHub Advisory Database vom 2026-09-15external
- GitHub Advisory Database vom 2026-09-15external
- GitHub Advisory Database vom 2026-09-15external
- GitHub Advisory Database vom 2026-09-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan