MISP MISP

Name: MISP MISP
Brand: MISP

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

3critical8high13medium0low

updated 2026-10-28

vulnerabilities (46)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-56423US	high8.8OT high	0.47% (41st)	Exploit	no fix	2026-06-22	2 versions
CVE-2025-67906US	critical9.0	0.33% (26th)	Exploit	2.5.28	2025-12-15	0 → 2.5.28
CVE-2026-8080US	medium5.4	0.14% (3rd)	Exploit	2.5.37	2026-05-07	0 → 2.5.37
CVE-2026-56446US	high7.2	0.69% (53rd)	—	no fix	2026-06-22	2 versions
CVE-2026-44381US	medium5.3	0.67% (52nd)	—	no fix	2026-05-13	≤ < 2.5.37
CVE-2026-67178US	—	0.66% (52nd)	—	2.5.41	2026-07-28	0 → 2.5.41
CVE-2026-56447US	high7.2	0.61% (49th)	—	no fix	2026-06-22	2 versions
CVE-2026-56422US	—	0.60% (49th)	—	no fix	2026-06-22	2 versions
CVE-2026-56424US	high8.8OT elevated	0.52% (44th)	—	no fix	2026-06-22	2 versions
CVE-2026-56425US	high8.8	0.46% (40th)	—	no fix	2026-06-22	2 versions
CVE-2026-61474US	—OT elevated	0.41% (35th)	—	no fix	2026-07-09	≤ 0 ≤2.5.42
CVE-2026-44380US	high7.2OT elevated	0.40% (34th)	—	no fix	2026-05-13	≤ < 2.5.37
CVE-2026-54393US	—	0.38% (32nd)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-60124US	—OT elevated	0.37% (31st)	—	no fix	2026-07-08	≤ 0 ≤2.5.42
CVE-2026-9137US	high7.5	0.36% (30th)	—	no fix	2026-05-20	≤ 2.5.0 ≤2.5.37
CVE-2025-66384US	—	0.36% (30th)	—	2.5.24	2025-11-28	0 → 2.5.24
CVE-2026-10611US	critical10.0	0.35% (29th)	—	no fix	2026-06-02	≤ 0 ≤2.5.38
CVE-2026-60125US	—OT elevated	0.35% (29th)	—	no fix	2026-07-08	≤ 0 ≤2.5.42
CVE-2026-39962US	critical9.6	0.34% (28th)	—	no fix	2026-04-09	≤ < 2.5.36
CVE-2026-54394US	—	0.32% (25th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2025-66386US	—	0.31% (23rd)	—	2.5.27	2025-11-28	0 → 2.5.27
CVE-2026-54361US	—	0.26% (18th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2024-57969US	—OT elevated	0.26% (17th)	—	2.4.198	2025-02-14	0 → 2.4.198
CVE-2026-54395US	—	0.26% (17th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-54357US	—OT elevated	0.25% (17th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-54396US	—	0.25% (16th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-10868US	—	0.24% (15th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2024-58130US	medium6.1	0.24% (15th)	—	2.4.193	2025-03-28	0 → 2.4.193
CVE-2026-9136US	medium6.5	0.23% (14th)	—	no fix	2026-05-20	≤ 2.5.0 ≤2.5.37
CVE-2026-54358US	—OT elevated	0.23% (14th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2024-58129US	medium4.8	0.23% (13th)	—	2.4.193	2025-03-28	0 → 2.4.193
CVE-2024-58128US	medium4.8	0.23% (13th)	—	2.4.193	2025-03-28	0 → 2.4.193
CVE-2026-54397US	—OT elevated	0.23% (13th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-54360US	—	0.23% (13th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-10863US	high8.1	0.22% (13th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-10861US	medium6.1	0.22% (13th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-54398US	—OT elevated	0.22% (12th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-54362US	—OT elevated	0.21% (11th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-10860US	medium6.5OT elevated	0.20% (9th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-54359US	—OT elevated	0.19% (9th)	—	2.5.40	2026-06-12	0 → 2.5.40
CVE-2026-9084US	—	0.18% (8th)	—	no fix	2026-05-20	≤ 2.5.0 ≤2.5.37
CVE-2026-44379US	medium5.3	0.18% (7th)	—	no fix	2026-05-13	≤ < 2.5.37
CVE-2026-10864US	medium4.3	0.18% (7th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-10854US	medium4.3	0.18% (7th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-10855US	medium4.3OT elevated	0.15% (5th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38
CVE-2026-10856US	medium6.1	0.15% (4th)	—	no fix	2026-06-04	≤ 0 ≤2.5.38

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization11 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-639Authorization Bypass Through User-Controlled Key6 CVEs
CWE-862Missing Authorization4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-287Improper Authentication2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)46 CVEs
NLNCSC-NL (CSAF)6 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan