Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how misp compares to other vendors in security performance

View Risk Score →

MISP cti-transmutecti-transmute Following List Exposes User Email Addresses to Authenticated Users

Risk 26
Severity
5.3
First published (updated )
CVE-2026-72760

Misp MispMISP: Improper sharing group authorization check when adding attributes

Risk 34
Severity
5.3
First published (updated )
CVE-2026-61474

Misp MISP coreBroken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models

Risk 79
Severity
7.1
First published (updated )
CVE-2026-56424

Misp MispMISP object edit authorization bypass allows unauthorized sharing group assignment

Risk 34
Severity
5.3
First published (updated )
CVE-2026-54398

Misp MispMISP UiBeta event index reflected XSS in advanced filter popup

Risk 34
Severity
5.3
First published (updated )
CVE-2026-54395
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispMISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files

Risk 26
Severity
5.3
First published (updated )
CVE-2026-54394

Misp MISP Overmind themeMISP Overmind theme stored XSS via unvalidated homepage setting

Risk 35
Severity
5.1
First published (updated )
CVE-2026-54393

Misp MispMISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

Risk 53
Severity
8.4
First published (updated )
CVE-2026-54360

Misp bsimvisMISP BSimVis stored cross-site scripting in tag and cluster rendering paths via unescaped tag metadata and UI labels

Risk 33
Severity
6.9
First published (updated )
CVE-2026-53693

Misp MISP DashboardMISP Dashboard widget field selection may expose restricted user and organisation data

Risk 26
Severity
5.3
First published (updated )
CVE-2026-10864
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispMISP User-controlled order parameter in correlations over-correlation endpoint

Risk 60
Severity
6.4
First published (updated )
CVE-2026-10863

Misp MispMISP CRUDComponent delete validation bypass via operator precedence error

Risk 79
Severity
7.9
First published (updated )
CVE-2026-10860

Misp MispMISP post-login open redirect via pre_login_requested_url

Risk 38
Severity
5.1
First published (updated )
CVE-2026-10861

Misp MispMISP: Improper access control in auth key reset allows privilege escalation to site administrator

Risk 72
Severity
8.6
First published (updated )
CVE-2026-44380

Misp MispMISP core - Stored XSS in MISP template (old engine) element attribute type

Risk 28
Severity
6.8
EPSS
0.03%
First published (updated )
CVE-2026-8080
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispXSS

Risk 74
Severity
9
First published (updated )
CVE-2025-67906

Misp MispPath Traversal

Risk 20
Severity
4.1
First published (updated )
CVE-2025-66386

Misp Mispapp/Controller/EventsController.php in MISP before 2.5.24 has invalid logic in checking for uploaded…

Risk 57
Severity
8.2
First published (updated )
CVE-2025-66384

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58129

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58128
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispXSS

Risk 44
Severity
7.2
First published (updated )
CVE-2024-58130

Misp Mispapp/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.

Risk 22
Severity
4.3
First published (updated )
CVE-2024-57969

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-54675

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2024-54674

Misp MispIn MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly…

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29858
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispMalicious File Upload

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29859

Misp MispXSS

Risk 27
Severity
6.1
EPSS
0.05%
First published (updated )
CVE-2023-41098

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-40224

Misp Mispapp/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_para…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48328

Misp MispMISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48329
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203