6704 matches found
MISP < 2.5.37 - SQL Injection
MISP before 2.5.37 is vulnerable to SQL injection via the order parameter in EventsController. The POST body order value is passed directly into ORDER BY clauses without validation. id: CVE-2026-44381 info: name: MISP 2.5.37 - SQL Injection author: malcha severity: medium description: | MISP befo...
PT-2026-121749
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user can trigger Lookyloo's "report a capture" email on demand this is expected. The /json//report API endpoint CaptureRepor...
CVE-2026-56423-MISP-deleteSelection-BrokenAccessControl
CVE-2026-56423 — MISP deleteSelection Broken Access Control Proof of concept for a missing-authorization flaw in MISP's bulk deletion flows for Event Reports and Sharing Groups. The deleteSelection handlers authorize each selected item with a callback that ignores the item and returns the caller'...
CVE-2025-67906
-c0392b?style=flat -orange?style=flat CVE-2025-67906 MISP = 2.5.27 - Stored Cross-Site Scripting via Workflow Engine doT.js Template Injection Discovered byFranck FERMAN Overview - Root Cause - Attack Chain - Structure - Usage - Remediation - References Vulnerability Overview CVE-2025-67906...
EUVD-2026-104668
The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...
CVE-2026-112991
The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...
CVE-2026-112991 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()
The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...
CVE-2026-112991
The MISP html_to_markdown expansion module is vulnerable to Server-Side Request Forgery (SSRF) due to incomplete IP range blocking in the is_safe_url() validation function. The BLOCKED_RANGES list fails to exclude critical ranges, including 0.0.0.0/8 , 100.64.0.0/10 , ::/128 , fc00::/7 , and fe80...
CVE-2026-112991 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()
The htmltomarkdown expansion module in MISP Modules contains a server-side request forgery SSRF vulnerability in its issafeurl URL validation function. The BLOCKEDRANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the...
CVE-2026-112184
MISP contains a reflected cross-site scripting XSS vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels on the workflow module page without output encoding. An attacker who can influence the parameter names...
CVE-2026-112192
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...
CVE-2026-112183
MISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour value associated with each remote tag is written directly into an inline CSS style attribute without sufficient validation. Although HTML entity...
CVE-2026-112192
The MISP platform contains a vulnerability in how it handles module plugin settings. When the server rebuilds settings for API consumption, it fails to preserve the redacted and cli_only flags defined in the module's configuration metadata. This leads to two primary issues: sensitive credentials ...
CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...
EUVD-2026-104153
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...
CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...
CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings
MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...
CVE-2026-112188
MISP versions prior to 2.5.48 are vulnerable to a server settings lookup flaw. When an authenticated user requests a branch name (e.g., Security, MISP, or Plugin) instead of a specific leaf setting, the system returns the entire configuration sub-tree. Because branch nodes lack a redaction flag, ...
EUVD-2026-104150
MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name such...
CVE-2026-112188 MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution
MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name such...