DeutschShown in its original language — a full translation is planned for a future version.
MISP: Mehrere Schwachstellen
view advisory published 2026-09-22
Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
01
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-95806US | — | — | ||
MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point.
The phar stream wrapper causes PHP to treat a phar archive as a dire… | ||||
| CVE-2026-95805US | — | — | ||
A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'theming_enabled*' (with a… | ||||
| CVE-2026-95754US | — | — | ||
In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification branch did not include the User.disabled… | ||||
| CVE-2026-95703US | — | — | ||
In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) before… | ||||
| CVE-2026-95701US | — | — | ||
In MISP, the __statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization l… | ||||
| CVE-2026-95698US | — | — | ||
The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extensi… | ||||
| CVE-2026-95697US | —OT elevated | — | ||
MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization meta… | ||||
| CVE-2026-95693US | — | — | ||
In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(), mime_content_type(), and exif_imagetype() on the supplied pa… | ||||
| CVE-2026-95685US | —OT elevated | — | ||
MISP contains an access control flaw in the EventReports functionality. The replaceSuggestionInReport action, which allows modification of suggestion content within an event report… | ||||
| CVE-2026-95683US | —OT elevated | — | ||
In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the… | ||||
| CVE-2026-95682US | — | — | ||
MISP contains a stored cross-site scripting (XSS) vulnerability in the admin email composition screen. The MISP.org organization name setting was interpolated directly into a JavaS… | ||||
| CVE-2026-95679US | — | — | ||
MISP's RequestHandlerComponent automatically decodes XML request bodies on all write requests. The underlying Xml::build() library contains a logic error in its readFile guard cond… | ||||
| CVE-2026-95674US | — | — | ||
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module… | ||||
| CVE-2026-95671US | —OT elevated | — | ||
In MISP, the CollectionsController add() method enforced the sharing-group usability authorization check and element capture only when the HTTP request method was POST. However, th… | ||||
| CVE-2026-95667US | — | — | ||
The MISP installer scripts (for Debian 12, Debian 13, Ubuntu 24.04, and RHEL 9.4) create a log file at /var/log/misp_install.log and a named pipe (FIFO) at /var/log/misp_install.lo… | ||||
| CVE-2026-95665US | — | — | ||
MISP contains a reflected cross-site scripting (XSS) vulnerability in the event REST search export confirmation form. The view template app/View/Events/ajax/eventRestSearchExportCo… | ||||
| CVE-2026-95661US | — | — | ||
MISP contains a reflected cross-site scripting (XSS) vulnerability in the attribute histogram view. The $selectedTypes variable, which is derived from the URL path segment , was in… | ||||
| CVE-2026-95659US | — | — | ||
MISP contains a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the U… | ||||
| CVE-2026-95658US | — | — | ||
MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disables b… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
- GitHub Advisory Database vom 2026-09-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan