8 matches found
CVE-2026-95674
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
CVE-2026-95674 MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
CVE-2026-95674 MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
EUVD-2026-84392
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
CVE-2026-95674
This vulnerability affects MISP (a threat intelligence platform), specifically the queryEnrichment method in EventsController.php. The root cause is a missing validation check: when a caller specified a module name not present in the instance's enabled modules list, the code silently continued pr...
CVE-2026-95674 MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
CVE-2026-95674: Improper Input Validation
In MISP, the queryEnrichment method in EventsController.php accepted a module name parameter and iterated over the list of enabled modules to find a match. If the specified module was not present in the enabled modules list, the code silently continued processing using default parameters format s...
PT-2026-96728
Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description The queryEnrichment function in EventsController.php fails to properly validate the module name parameter. When a module name is provided that is not in the list of enabled modules, the system...