CVE-2026-95659

MISP contains a reflected cross-site scripting XSS vulnerability in the AnalystDataController::viewForObject action. The method accepted a parent object type parameter from the URL without validation and passed it to the Overmind-themed AnalystData thread view element, where it was interpolated...

CVE-2026-95659

MISP versions prior to 2.5.47 are affected by a reflected cross-site scripting (XSS) vulnerability in the AnalystDataController::viewForObject action. The method accepts a parent object type parameter from the URL without validation and passes it to the Overmind-themed AnalystData thread view ele...