Vulnerabilities

TI-2026-61820 CVE-2026-90961 · GHSA-5wh5-3jx8-w3gh

MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials

MEDIUM 43

The LdapAuth and LinOTPAuth authentication plugins in MISP contain an authentication bypass vulnerability.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0064 Published 2026-09-14 Fixed in 2.5.46 CWE-20

TI-2026-61818 CVE-2026-90957 · GHSA-5mp5-7f8h-r69q

MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures

LOW 23

Affected versions of MISP serve uploaded SVG images inline without a restrictive browser sandbox.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00396 Published 2026-09-14 Fixed in 2.5.46 CWE-693

TI-2026-61817 CVE-2026-90955 · GHSA-wxf7-wrjx-26cc

MISP CLI Shell Audit Logs Lose User Identity and CLI Marker After First Lazy Model Load

LOW 20

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging.

CVSS 4.0MEDIUM 4.6 Local High privileges No interaction EPSS 0.0016 Published 2026-09-14 Fixed in 2.5.46 CWE-223

TI-2026-61767 CVE-2026-90895 · GHSA-rx79-g748-j44m

MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection

LOW 37

Affected versions of MISP’s interactive CLI shell implement access control independently from the normal web application, causing several authorization inconsistencies.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00149 Published 2026-09-14 Fixed in 2.5.46 CWE-150

TI-2026-61765 CVE-2026-90893 · GHSA-g37r-568w-2pwm

MISP UserSettingsController CSRF Protection Bypass on setTheme, setHomePage, and eventIndexColumnToggle Endpoints