DeutschShown in its original language — a full translation is planned for a future version.
MISP: Mehrere Schwachstellen
view advisory published 2026-10-07
Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um Daten zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-107278US | — | — | ||
MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. Howeve… | ||||
| CVE-2026-107276US | — | — | ||
MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can succes… | ||||
| CVE-2026-107180US | —OT elevated | — | ||
On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup applied only to standard browser re… | ||||
| CVE-2026-107175US | — | — | ||
MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when an event's distribution level or sharing group is modifi… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan