Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: MISP 2.5.48 Clear all filters
TI-2026-69130 CVE-2026-107180 · GHSA-jgf2-xf9x-w72j

Forced TOTP enrolment bypass via non-browser requests in MISP

Priority LOW 31

On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-07 Fixed in 2.5.48 CWE-287
TI-2026-69128 CVE-2026-107175 · GHSA-9v45-rw9g-683m

MISP correlation engine skips refresh when event sharing changes

Priority LOW 23

MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when an event's distribution level or sharing group is modified.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00207 Published 2026-10-07 Fixed in 2.5.48 CWE-284