Where
-Infinity
0

Trending

Last week
Last month
Last year

Misp MispMISP: Improper sharing group authorization check when adding attributes

Risk 34
Severity
5.3
First published (updated )
CVE-2026-61474

Misp MispMISP object edit authorization bypass allows unauthorized sharing group assignment

Risk 34
Severity
5.3
First published (updated )
CVE-2026-54398

Misp MispMISP UiBeta event index reflected XSS in advanced filter popup

Risk 34
Severity
5.3
First published (updated )
CVE-2026-54395

Misp MispMISP organisation logo path traversal allows retrieval of arbitrary PNG/SVG files

Risk 26
Severity
5.3
First published (updated )
CVE-2026-54394

Misp MispMISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

Risk 53
Severity
8.4
First published (updated )
CVE-2026-54360
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispMISP User-controlled order parameter in correlations over-correlation endpoint

Risk 60
Severity
6.4
First published (updated )
CVE-2026-10863

Misp MispMISP CRUDComponent delete validation bypass via operator precedence error

Risk 79
Severity
7.9
First published (updated )
CVE-2026-10860

Misp MispMISP post-login open redirect via pre_login_requested_url

Risk 38
Severity
5.1
First published (updated )
CVE-2026-10861

Misp MispMISP: Improper access control in auth key reset allows privilege escalation to site administrator

Risk 72
Severity
8.6
First published (updated )
CVE-2026-44380

Misp MispMISP core - Stored XSS in MISP template (old engine) element attribute type

Risk 28
Severity
6.8
EPSS
0.03%
First published (updated )
CVE-2026-8080
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispXSS

Risk 74
Severity
9
First published (updated )
CVE-2025-67906

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58129

Misp MispXSS

Risk 33
Severity
5.5
First published (updated )
CVE-2024-58128

Misp MispXSS

Risk 44
Severity
7.2
First published (updated )
CVE-2024-58130

Misp Mispapp/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.

Risk 22
Severity
4.3
First published (updated )
CVE-2024-57969
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispIn MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly…

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29858

Misp MispMalicious File Upload

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-29859

Misp MispXSS

Risk 27
Severity
6.1
EPSS
0.05%
First published (updated )
CVE-2023-41098

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-40224

Misp Mispapp/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_para…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48328
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispMISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute…

Risk 86
Severity
9.8
First published (updated )
CVE-2022-48329

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2023-24027

Misp MispXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-29530

Misp MispXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-29529

Misp MispAn issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can be…

Risk 43
Severity
7.5
First published (updated )
CVE-2022-29534
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Misp MispAn issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.

Risk 86
Severity
9.8
First published (updated )
CVE-2022-29528

Misp MispXSS

Risk 34
Severity
5.4
First published (updated )
CVE-2022-29531

Misp MispXSS

Risk 29
Severity
4.8
First published (updated )
CVE-2022-29532

Misp MispXSS

Risk 38
Severity
6.1
First published (updated )
CVE-2022-29533

Misp MispAn issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion…

Risk 68
Severity
7.8
First published (updated )
CVE-2022-27243
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203