Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20048 |
8.7 (4.0)
|
MISP Privilege Escalation: Read-Only API Key User Can … |
MISP |
MISP |
2026-09-21T12:42:44.209048Z | 2026-09-21T12:42:51.306891Z |
| GCVE-1-2026-20013 |
6.9 (4.0)
|
MISP: HTTP Method Bypass of Login Security Controls (B… |
MISP |
MISP |
2026-09-21T12:35:18.599403Z | 2026-09-21T12:35:24.706090Z |
| GCVE-1-2026-20022 |
8.3 (4.0)
|
MISP: IDOR via Client-Supplied Report ID in Module Res… |
MISP |
MISP |
2026-09-21T12:24:54.615296Z | 2026-09-21T12:25:00.709103Z |
| GCVE-1-2026-20033 |
6.3 (4.0)
|
MISP DOM-based Cross-Site Scripting via innerHTML in C… |
MISP |
MISP |
2026-09-21T12:16:38.409984Z | 2026-09-21T12:16:44.442452Z |
| GCVE-1-2026-20002 |
6.3 (4.0)
|
Stored Cross-Site Scripting via Unescaped Galaxy Clust… |
MISP |
MISP |
2026-09-21T12:02:05.882152Z | 2026-09-21T12:02:14.293981Z |
| GCVE-1-2026-20155 |
6.3 (4.0)
|
Stored Cross-Site Scripting in MISP Galaxy Matrix Stat… |
MISP |
MISP |
2026-09-21T09:24:53.798390Z | 2026-09-21T09:25:03.021301Z |
| GCVE-1-2026-20206 |
8.5 (4.0)
|
MISP Overmind: Stored Cross-Site Scripting via Unescap… |
misp |
misp |
2026-09-17T16:29:00.000Z | 2026-09-22T07:36:39.504987Z |
| GCVE-1-2026-20153 |
8.7 (4.0)
|
MISP Background Job Argument Injection via Console Pat… |
misp |
misp |
2026-09-17T16:23:00.000Z | 2026-09-22T07:42:03.681655Z |
| GCVE-1-2026-20250 |
5.1 (4.0)
|
MISP sachertortephp Xml::build() Operator Precedence B… |
misp |
sachertortephp |
2026-09-17T12:31:00.000Z | 2026-09-17T12:40:24.560833Z |
| GCVE-1-2026-20158 |
6.9 (4.0)
|
MISP Unthrottled Authentication Failure Log Writes Ena… |
MISP |
MISP |
2026-09-15T11:43:10.471950Z | 2026-09-15T11:43:17.611571Z |
| GCVE-1-2026-20172 |
5.1 (4.0)
|
MISP: Authentication failure logging suppressed during… |
MISP |
MISP |
2026-09-15T11:24:14.041885Z | 2026-09-15T11:24:19.852432Z |
| GCVE-1-2026-20138 |
5.3 (4.0)
|
MISP Access Log Entry Overwritten by Error Controller'… |
MISP |
MISP |
2026-09-15T09:26:25.355698Z | 2026-09-15T09:26:32.333924Z |
| GCVE-1-2026-20242 |
5.3 (4.0)
|
MISP: State-changing actions accessible via GET reques… |
MISP |
MISP |
2026-09-15T09:14:33.110236Z | 2026-09-15T09:14:40.600582Z |
| GCVE-1-2026-20010 |
5.3 (4.0)
|
MISP Dashboard Template ACL Bypass Due to VARCHAR-to-I… |
MISP |
MISP |
2026-09-15T08:49:54.480630Z | 2026-09-15T08:49:59.806159Z |
| GCVE-1-2026-20267 |
7.1 (4.0)
|
MISP Collection Element Add Missing Authorization on R… |
MISP |
MISP |
2026-09-15T08:36:15.273263Z | 2026-09-15T08:36:21.073370Z |
| GCVE-1-2026-20122 |
7.1 (4.0)
|
MISP: Missing Authorization Check for Event Sharing Gr… |
MISP |
MISP |
2026-09-15T08:06:18.663239Z | 2026-09-15T08:06:30.544181Z |
| GCVE-1-2026-20102 |
6.9 (4.0)
|
MISP: HTTP Method Override Bypasses CSRF and Form Vali… |
MISP |
MISP |
2026-09-15T07:41:19.838478Z | 2026-09-15T07:41:29.964690Z |
| GCVE-1-2026-20246 |
9.3 (4.0)
|
MISP LdapAuth and LinOTPAuth Authentication Bypass via… |
MISP |
MISP |
2026-09-14T13:21:56.766377Z | 2026-09-14T13:22:05.347324Z |
| GCVE-1-2026-20098 |
5.1 (4.0)
|
MISP: Stored XSS via Inline-Served SVG Organisation Lo… |
MISP |
MISP |
2026-09-14T13:02:43.081085Z | 2026-09-14T13:02:54.706315Z |
| GCVE-1-2026-20197 |
4.6 (4.0)
|
MISP CLI Shell Audit Logs Lose User Identity and CLI M… |
MISP |
MISP |
2026-09-14T12:37:46.361164Z | 2026-09-14T12:37:52.449466Z |
| GCVE-1-2026-20058 |
8.4 (4.0)
|
MISP Interactive CLI Shell: Authorization Bypass, Cred… |
MISP |
MISP |
2026-09-14T09:40:44.556373Z | 2026-09-14T09:40:52.749735Z |
| GCVE-1-2026-20226 |
5.1 (4.0)
|
MISP UserSettingsController CSRF Protection Bypass on … |
MISP |
MISP |
2026-09-14T09:11:53.023118Z | 2026-09-14T09:12:01.892160Z |
| GCVE-1-2026-20178 |
5.1 (4.0)
|
MISP: Unescaped HTML Injection in PDF Report Element R… |
MISP |
MISP |
2026-09-10T13:41:00.000Z | 2026-09-14T06:51:22.190733Z |
| GCVE-1-2026-20110 |
7.1 (4.0)
|
MISP Event Template Instantiation Bypasses Sharing Gro… |
MISP |
MISP |
2026-09-10T13:03:54.652851Z | 2026-09-10T13:04:01.471196Z |
| GCVE-1-2026-20209 |
9.3 (4.0)
|
Path traversal in Pandora archive extractor allows arb… |
pandora-analysis |
pandora |
2026-09-09T21:34:00.000Z | 2026-09-09T21:55:15.070161Z |
| GCVE-1-2026-20026 |
10 (4.0)
|
KGUARD DVR unauthenticated remote command execution vu… |
KGUARD |
KGUARD_firmware |
2026-09-09T10:27:00.000Z | 2026-09-09T10:53:31.849724Z |
| GCVE-1-2026-20093 |
8.7 (4.0)
|
MISP Unauthenticated Mail Endpoints Allow Unbounded St… |
MISP |
MISP |
2026-09-07T13:03:00.000Z | 2026-09-14T06:43:20.942852Z |
| GCVE-1-2026-20223 |
5.3 (4.0)
|
MISP Event Graph Object Reference Lookup Exposes Refer… |
MISP |
MISP |
2026-09-07T12:59:35.971838Z | 2026-09-07T12:59:41.744409Z |
| GCVE-1-2026-20216 |
2.3 (4.0)
|
MISP Dashboard Organisation Widgets Bypass Organisatio… |
MISP |
MISP |
2026-09-07T12:39:11.343813Z | 2026-09-07T12:39:18.524831Z |
| GCVE-1-2026-20035 |
5.1 (4.0)
|
MISP Dashboard Button Widget Allows Stored XSS via Uns… |
MISP |
MISP |
2026-09-07T12:34:59.606582Z | 2026-09-07T12:35:07.407101Z |