CVE-2026-112192

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...

CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...

CVE-2026-112192

The MISP platform contains a vulnerability in how it handles module plugin settings. When the server rebuilds settings for API consumption, it fails to preserve the redacted and cli_only flags defined in the module's configuration metadata. This leads to two primary issues: sensitive credentials ...

EUVD-2026-104153

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...

CVE-2026-112192 MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and clionly flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as an...