CVE-2026-103389 MISP Stored Cross-Site Scripting via Unvalidated Galaxy Icon Field in Correlation Graph

[
  {
    "cpes": [
      "cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Galaxy model",
      "Correlation Graph (default theme)",
      "Correlation Graph (Overmind theme)",
      "Galaxy sync/import capture"
    ],
    "product": "MISP",
    "programFiles": [
      "app/Model/Galaxy.php",
      "app/Lib/Tools/CorrelationGraphTool.php",
      "app/webroot/js/correlation-graph.js",
      "app/webroot/js/correlation-graphOvermind.js"
    ],
    "repo": "https://github.com/MISP/MISP",
    "vendor": "MISP",
    "versions": [
      {
        "lessThan": "2.5.48",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]