Vulnerabilities in MISP

67 results
Vexday analysis

O MISP apresenta 13 vulnerabilidades catalogadas, sendo 5 divulgadas nos últimos 90 dias, o que indica atividade contínua de descoberta de falhas. Embora nenhuma esteja sob ataque ativo no momento, 2 vulnerabilidades críticas e a predominância de injeção de conteúdo (CWE-79) requerem atenção, especialmente considerando o papel estratégico da plataforma em ecossistemas de compartilhamento de inteligência de ameaças.

CVE-2026-73155MEDIUMcti-transmute Missing Authorization Allows Reactions to Private CommentsEPSS —CVE-2026-73156MEDIUMcti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion DataEPSS —CVE-2026-73159MEDIUMcti-transmute Stored XSS via Crafted Tag Icon on Admin Triage InterfaceEPSS —CVE-2026-73158MEDIUMcti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIconEPSS —CVE-2026-72760MEDIUMcti-transmute Following List Exposes User Email Addresses to Authenticated UsersEPSS —CVE-2026-72751MEDIUMStored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP ContentEPSS —CVE-2026-73157LOWcti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event MetadataEPSS —