https://vulnerability.circl.lu Vulnerabilities published under the CPE names of MISP. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 02:21:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-88915 MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization https://vulnerability.circl.lu/vuln/cve-2026-88915 Thu, 10 Sep 2026 13:04:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-88921 MISP: Unescaped HTML Injection in PDF Report Element Rendering MISP: Unescaped HTML Injection in PDF Report Element Rendering https://vulnerability.circl.lu/vuln/cve-2026-88921 Thu, 10 Sep 2026 13:41:51 +0000 https://vulnerability.circl.lu/vuln/cve-2026-85546 MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests https://vulnerability.circl.lu/vuln/cve-2026-85546 Fri, 04 Sep 2026 09:27:36 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86283 MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data https://vulnerability.circl.lu/vuln/cve-2026-86283 Sun, 06 Sep 2026 14:15:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86451 MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects https://vulnerability.circl.lu/vuln/cve-2026-86451 Mon, 07 Sep 2026 12:59:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86441 MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data https://vulnerability.circl.lu/vuln/cve-2026-86441 Mon, 07 Sep 2026 12:39:20 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86440 MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs https://vulnerability.circl.lu/vuln/cve-2026-86440 Mon, 07 Sep 2026 12:35:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86419 MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery https://vulnerability.circl.lu/vuln/cve-2026-86419 Mon, 07 Sep 2026 12:31:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86418 MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users https://vulnerability.circl.lu/vuln/cve-2026-86418 Mon, 07 Sep 2026 12:22:52 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86417 MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users https://vulnerability.circl.lu/vuln/cve-2026-86417 Mon, 07 Sep 2026 12:17:43 +0000