Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how misp project compares to other vendors in security performance

View Risk Score →

Misp Project MispMISP remote code execution via arbitrary rdkafka configuration path

Risk 59
Severity
9.3
First published (updated )
CVE-2026-56447

Misp Project MispAuthenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP

Risk 55
Severity
8.7
First published (updated )
CVE-2026-56446

Misp Project MISP AAD Authentication PluginMISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection

Risk 80
Severity
9.3
First published (updated )
CVE-2026-56425

Misp Project MISP CoreMISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

Risk 81
Severity
9.4
First published (updated )
CVE-2026-56423

Misp Project MISP CoreMISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields

Risk 81
Severity
9.4
First published (updated )
CVE-2026-56422
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MispMISP event editing allows unauthorized assignment to undisclosed sharing groups

Risk 35
Severity
6.1
First published (updated )
CVE-2026-54397

Misp Project MispMISP AuthKey edit endpoint allows authenticated user email enumeration

Risk 26
Severity
5.3
First published (updated )
CVE-2026-54396

Misp Project MispMISP template builder exposes non-visible custom galaxies across organisations

Risk 26
Severity
5.3
First published (updated )
CVE-2026-54362

Misp Project MispMISP mass assignment vulnerabilities allow unauthorized modification of ownership and delegation records

Risk 57
Severity
8.8
First published (updated )
CVE-2026-54361

Misp Project MispMISP automation endpoints may be exposed to CSRF when Sec-Fetch-Site protection is disabled by default

Risk 40
Severity
7.1
First published (updated )
CVE-2026-54359
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MispMISP organization administrators can target site administrator accounts for password reset

Risk 66
Severity
7.5
First published (updated )
CVE-2026-54358

Misp Project MispMISP improper authorization allows organization administrators to modify site administrator user settings

Risk 31
Severity
5.1
First published (updated )
CVE-2026-54357

Misp Project MispMISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification

Risk 54
Severity
9
First published (updated )
CVE-2026-10868

Misp Project MispOpen redirect in MISP dashboard button widget URL handling

Risk 38
Severity
5.1
First published (updated )
CVE-2026-10856

Misp Project MISP Event Template ImporterMISP Event template importer authorization bypass

Risk 23
Severity
5.1
First published (updated )
CVE-2026-10855
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MispUnauthorized exposure of private galaxies in MISP event template creation

Risk 26
Severity
5.3
First published (updated )
CVE-2026-10854

Misp Project MispOTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled

Risk 87
Severity
8.2
First published (updated )
CVE-2026-10611

Misp Project MispCSP Report Endpoint Log Flooding in MISP via Incorrect Size Limit

Risk 31
Severity
5.1
EPSS
0.36%
First published (updated )
CVE-2026-9137

Misp Project MispUnauthorized ShadowAttribute modification in MISP via client-supplied identifier

Risk 32
Severity
8.3
EPSS
0.23%
First published (updated )
CVE-2026-9136

Misp Project MISP OIDC authentication pluginMISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations

Risk 25
Severity
6
EPSS
0.18%
First published (updated )
CVE-2026-9084
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MispMISP: Improper UUID validation in MISP Collections

Risk 26
Severity
5.3
First published (updated )
CVE-2026-44379

Misp Project MispMISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings

Risk 84
Severity
9.3
First published (updated )
CVE-2026-44381

Misp Project MispLDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

Risk 80
Severity
8.8
First published (updated )
CVE-2026-39962

Misp Project MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2017-7215

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203