Vulnerabilities

TI-2026-76320 CVE-2026-112192 · GHSA-8p2f-rwxg-cq4h

MISP leaks redacted module settings and lets users edit CLI-only ones

LOW 24

MISP contains a vulnerability in the handling of module plugin settings.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00365 Published 2026-10-19 Fixed in 2.5.48 CWE-200

TI-2026-76319 CVE-2026-112188 · GHSA-mp6x-6c2r-xcxv

MISP server settings lookup exposes configuration secrets

LOW 31

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00271 Published 2026-10-19 Fixed in 2.5.48 CWE-200

TI-2026-76318 CVE-2026-112184 · GHSA-4j43-fg42-frxx

Reflected XSS in MISP workflow module via misp-modules parameter names

LOW 22

MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00352 Published 2026-10-19 Fixed in 2.5.48 CWE-79

TI-2026-76317 CVE-2026-112183 · GHSA-jj77-qm54-jjwq

MISP CSS Injection via Remote Tag Colour in Event Preview

LOW 22

MISP contains a CSS injection vulnerability in the remote event preview feature.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00288 Published 2026-10-19 Fixed in 2.5.48 CWE-74

TI-2026-76315 CVE-2026-112179 · GHSA-xqrq-qg67-37w5

Non-exportable tags leak to remote MISP instances during event sync

LOW 24

In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00309 Published 2026-10-19 Fixed in 2.5.48 CWE-200

TI-2026-76314 CVE-2026-112178 · GHSA-9h3q-39v8-fmg5

Missing authorization in MISP proposal visibility exposes shadow attributes