https://vulnerability.circl.lu/product/c5e39a71-e225-4134-bc50-37d5e41557ea/recent 2026-09-12T02:21:44.073472+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Vulnerabilities published under the CPE names of MISP. https://vulnerability.circl.lu/vuln/cve-2026-88915 2026-09-10T17:33:00.129000+00:00 MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

2026-09-10T13:04:03.331000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-88921 2026-09-10T17:02:58.068000+00:00 MISP: Unescaped HTML Injection in PDF Report Element Rendering

MISP: Unescaped HTML Injection in PDF Report Element Rendering

2026-09-10T13:41:51.214000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-85546 2026-09-10T07:53:21.692000+00:00 MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests

2026-09-04T09:27:36.525000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86283 2026-09-08T18:18:22.932000+00:00 MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data

MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data

2026-09-06T14:15:06.533000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86451 2026-09-08T14:52:50.200000+00:00 MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

2026-09-07T12:59:43.472000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86441 2026-09-08T14:51:56.217000+00:00 MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

2026-09-07T12:39:20.835000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86440 2026-09-08T14:51:34.403000+00:00 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs

2026-09-07T12:35:10.174000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86419 2026-09-08T14:51:13.597000+00:00 MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

2026-09-07T12:31:35.184000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86418 2026-09-08T14:50:43.500000+00:00 MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users

2026-09-07T12:22:52.859000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-86417 2026-09-08T14:50:22.615000+00:00 MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users

2026-09-07T12:17:43.320000+00:00