DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
MISP: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-09-21
Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen sowie Cross-Site-Scripting-Angriffe durchzuführen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-94404US | — | — | ||
MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.
The affec… | ||||
| CVE-2026-94401US | — | — | ||
MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services.
When importing an XML file, MISP… | ||||
| CVE-2026-94394US | —OT erhöht | — | ||
When a regular user adds a reference between objects or attributes, MISP checks whether the user can access the overall event, but it does not always check whether the individual p… | ||||
| CVE-2026-94393US | — | — | ||
When a user creates or edits a report inside an event, MISP can identify an existing report using its UUID without properly checking whether that report actually belongs to the sam… | ||||
| CVE-2026-94383US | — | — | ||
The MISP blocklist workflow module accepted a user-supplied blocklist filename parameter without validating the file extension. The only sanitization applied was basename() to stri… | ||||
| CVE-2026-94381US | — | — | ||
MISP has a security issue that can let a user gain more access than their API key is supposed to allow.
A read-only API key should only let someone view information. However, afte… | ||||
| CVE-2026-94379US | — | — | ||
The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several security-critical code paths. The original code used an allowlist appro… | ||||
| CVE-2026-94374US | — | — | ||
MISP contains an insecure direct object reference vulnerability in the processModuleResultsData method of the Event model. When processing module results, the code iterates over Ev… | ||||
| CVE-2026-94373US | — | — | ||
MISP contains a DOM-based cross-site scripting (XSS) vulnerability in the contextual menu JavaScript component. The ContextualMenu class populates HTML <option> elements by assigni… | ||||
| CVE-2026-94372US | — | — | ||
MISP contains a stored cross-site scripting (XSS) vulnerability in the default theme's Galaxies index page. When a MISP instance detects unknown custom or default galaxy clusters d… | ||||
| CVE-2026-94277US | — | — | ||
MISP's galaxy matrix statistics view (app/View/Users/statistics_galaxymatrix.ctp) renders the galaxy name directly into HTML output via sprintf() without any HTML encoding. An auth… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- MISP 2.5.47 Release Notes vom 2026-09-21external
- GitHub Security Advisory GHSA-2JVM-986Q-589G vom 2026-09-21external
- GitHub Security Advisory GHSA-3q8c-466v-vgx3 vom 2026-09-21external
- GitHub Security Advisory GHSA-6M7X-X7F7-6WJC vom 2026-09-21external
- GitHub Security Advisory GHSA-8Q25-97Q9-G9WH vom 2026-09-21external
- GitHub Security Advisory GHSA-8mcv-mp35-55rc vom 2026-09-21external
- GitHub Security Advisory GHSA-CJ24-5F9W-VHX6 vom 2026-09-21external
- GitHub Security Advisory GHSA-QG5M-5M7W-MF5X vom 2026-09-21external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan