MISP

Exploited now

None of this vendor's CVEs are on CISA's known-exploited list.

Recent

• 6.1MediumOct 27, 2026misp-guardCVE-2026-118173MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation check for required taxonomy tags. When a feed event or its attributes carried tags belonging to a required taxonomy (for example, TLP), the guard only verified that at least one tag of that taxo
• 7.1HighOct 26, 2026misp-guardCVE-2026-116469MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in multiple policy enforcement checks. The functions check_required_taxonomy_exists, check_required_taxonomy_tags_allowed, check_blocked_attribute_categories, and check_blocked_analyst_data_sharing_groups_uuids performed case-sensitive string comparisons when matching event tags, attribute categories, and sharing-group UUIDs against configured allow/block lists. An attacker with the ability to
• 7.7HighOct 26, 2026misp-guardCVE-2026-116372MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The process_feed_response method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled the case where the HTTP status code was not 200 by passing the response through without filtering, on the assumption that non-200 responses would not carry ingestible event data. However, HTTP 2xx statu
• 7.1HighOct 19, 2026MISP Information disclosureCVE-2026-112188MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name (such
• 6.3MediumMay 28, 2026Misp cti-transmute XSSCVE-2026-9806A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release. Notification messages containing user-controlled convert names were rendered in the notification bell dropdown using innerHTML without adequate sanitization. An attacker able to create or influence a convert name that is included in a notification could inject arbitrary JavaScript, which would execute in the browser of an authenticated user when they opene

See every MISP entry on the dashboard.

Top products

• misp-guard3 CVEs in the last year
• MISP1 CVE in the last year
• cti-transmute1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• ENISA EUVD · Oct 27, 2026EUVD-2026-111350 · MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation…CVE-2026-118173
• ENISA EUVD · Oct 26, 2026EUVD-2026-109736 · MISP Guard, a proxy-based security filter for MISP feed distribution, contains a case-sensitivity flaw in…CVE-2026-116469
• ENISA EUVD · Oct 19, 2026EUVD-2026-104150 · MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to…CVE-2026-112188