Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how misp-project compares to other vendors in security performance

View Risk Score →

Misp Project MispMISP remote code execution via arbitrary rdkafka configuration path

Risk 59
Severity
9.3
First published (updated )
CVE-2026-56447

Misp Project MispAuthenticated Remote Code Execution via Arbitrary NDJSON Error Log Path in MISP

Risk 55
Severity
8.7
First published (updated )
CVE-2026-56446

Misp Project MISP AAD Authentication PluginMISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection

Risk 80
Severity
9.3
First published (updated )
CVE-2026-56425

Misp MISP coreBroken access control in MISP core allows cross-organization unauthorized modification or deletion of analyst data, event reports, collections, templates, and decaying models

Risk 79
Severity
7.1
First published (updated )
CVE-2026-56424

Misp Project MISP CoreMISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

Risk 81
Severity
9.4
First published (updated )
CVE-2026-56423
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MISP DashboardMISP Dashboard widget field selection may expose restricted user and organisation data

Risk 26
Severity
5.3
First published (updated )
CVE-2026-10864

Misp MispMISP User-controlled order parameter in correlations over-correlation endpoint

Risk 60
Severity
6.4
First published (updated )
CVE-2026-10863

Misp MispMISP CRUDComponent delete validation bypass via operator precedence error

Risk 79
Severity
7.9
First published (updated )
CVE-2026-10860

Misp MispMISP post-login open redirect via pre_login_requested_url

Risk 38
Severity
5.1
First published (updated )
CVE-2026-10861

Misp Project MispOpen redirect in MISP dashboard button widget URL handling

Risk 38
Severity
5.1
First published (updated )
CVE-2026-10856
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MISP Event Template ImporterMISP Event template importer authorization bypass

Risk 23
Severity
5.1
First published (updated )
CVE-2026-10855

Misp Project MispUnauthorized exposure of private galaxies in MISP event template creation

Risk 26
Severity
5.3
First published (updated )
CVE-2026-10854

Misp Project MispOTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled

Risk 87
Severity
8.2
First published (updated )
CVE-2026-10611

Misp Project MispCSP Report Endpoint Log Flooding in MISP via Incorrect Size Limit

Risk 31
Severity
5.1
EPSS
0.36%
First published (updated )
CVE-2026-9137

Misp Project MispUnauthorized ShadowAttribute modification in MISP via client-supplied identifier

Risk 32
Severity
8.3
EPSS
0.23%
First published (updated )
CVE-2026-9136
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp Project MispMISP: Improper UUID validation in MISP Collections

Risk 26
Severity
5.3
First published (updated )
CVE-2026-44379

Misp MispMISP: Improper access control in auth key reset allows privilege escalation to site administrator

Risk 72
Severity
8.6
First published (updated )
CVE-2026-44380

Misp Project MispMISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings

Risk 84
Severity
9.3
First published (updated )
CVE-2026-44381

Misp MispMISP core - Stored XSS in MISP template (old engine) element attribute type

Risk 28
Severity
6.8
EPSS
0.03%
First published (updated )
CVE-2026-8080

Misp Project MispLDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

Risk 80
Severity
8.8
First published (updated )
CVE-2026-39962
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispXSS

Risk 74
Severity
9
First published (updated )
CVE-2025-67906

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58129

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58128

Misp MispXSS

Risk 44
Severity
7.2
First published (updated )
CVE-2024-58130

Misp Mispapp/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.

Risk 22
Severity
4.3
First published (updated )
CVE-2024-57969
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp-project Mispapp/Controller/UserLoginProfilesController.php in MISP before 2.4.198 does not prevent an org admin …

Risk 86
Severity
9.8
First published (updated )
CVE-2024-46918

Misp-project MispIn MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to…

Risk 86
Severity
9.8
First published (updated )
CVE-2024-45509

Misp MispIn MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly…

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29858

Misp MispMalicious File Upload

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29859

Misp-project MispMalicious File Upload

Risk 61
Severity
9.8
EPSS
0.09%
First published (updated )
CVE-2024-25674
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203