EUVD-2026-111350

MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy for example, TLP, the guard only verified that at least one tag of that...

CVE-2026-118173

The MISP Guard proxy contains an incomplete validation check for required taxonomy tags (such as TLP ). The system incorrectly verifies that only at least one tag within a required taxonomy matches the allowed list, rather than ensuring every present tag is permitted. This flaw allows feed events...

CVE-2026-118173 MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement

MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy for example, TLP, the guard only verified that at least one tag of that...