CVE-2026-81820

Flowintel versions greater than 3.3.0 are vulnerable to HTML injection in the MISP case history timeline. Attacker-controllable MISP object fields (object UUID, name, attribute value, attribute type, comment, first/last seen, and IDS flag) were concatenated directly into HTML strings before rende...