https://vulnogram.org/ Most recent CVEs assigned by Computer Incident Response Center Luxembourg (CIRCL) (circl). https://vulnogram.org/seaview/icons/circl.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-112991 https://vulnogram.org/CVE-2026-112991 The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitti… Medium Mon, 19 Oct 2026 22:19:50 GMT https://vulnogram.org/CVE-2026-112192 https://vulnogram.org/CVE-2026-112192 MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli_only flags that a module declares in its own configuration metadata. As a re… Medium Mon, 19 Oct 2026 09:28:08 GMT https://vulnogram.org/CVE-2026-112188 https://vulnogram.org/CVE-2026-112188 MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in… High Mon, 19 Oct 2026 09:22:37 GMT https://vulnogram.org/CVE-2026-112184 https://vulnogram.org/CVE-2026-112184 MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels on the workflow module page without output encoding. An att… Medium Mon, 19 Oct 2026 09:19:45 GMT https://vulnogram.org/CVE-2026-112183 https://vulnogram.org/CVE-2026-112183 MISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour value associated with each remote tag is written directly into an inline CSS style attribute without… Medium Mon, 19 Oct 2026 09:15:47 GMT https://vulnogram.org/CVE-2026-112180 https://vulnogram.org/CVE-2026-112180 MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the database, leaving them as orphaned entries. The affected record types include event report tags, event… Medium Mon, 19 Oct 2026 09:00:13 GMT https://vulnogram.org/CVE-2026-112179 https://vulnogram.org/CVE-2026-112179 In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of non-exportable tags was applied only once after the iteration over all reports, rather than to each individual re… Medium Mon, 19 Oct 2026 08:53:57 GMT https://vulnogram.org/CVE-2026-112178 https://vulnogram.org/CVE-2026-112178 MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharing groups without verifying the distribution level, and denied the owni… High Mon, 19 Oct 2026 08:50:52 GMT https://vulnogram.org/CVE-2026-111458 https://vulnogram.org/CVE-2026-111458 The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b64) + strlen(hex) + 31, but the format string "fan1:x509:server:passiv… Medium Fri, 16 Oct 2026 05:24:43 GMT https://vulnogram.org/CVE-2026-107278 https://vulnogram.org/CVE-2026-107278 MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the syn… Medium Wed, 07 Oct 2026 15:42:42 GMT https://vulnogram.org/CVE-2026-107276 https://vulnogram.org/CVE-2026-107276 MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can successfully authenticate and establish a session. The root cause is that th… Medium Network Exploitable Wed, 07 Oct 2026 15:36:49 GMT https://vulnogram.org/CVE-2026-107180 https://vulnogram.org/CVE-2026-107180 On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup applied only to standard browser requests. An authenticated user who had not yet enrolled in TOTP could b… High Wed, 07 Oct 2026 12:49:40 GMT https://vulnogram.org/CVE-2026-107175 https://vulnogram.org/CVE-2026-107175 MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when an event's distribution level or sharing group is modified. When a user edits an existing event and changes its distribution o… Medium Wed, 07 Oct 2026 12:38:44 GMT https://vulnogram.org/CVE-2026-106513 https://vulnogram.org/CVE-2026-106513 MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust… Medium Tue, 06 Oct 2026 18:58:53 GMT https://vulnogram.org/CVE-2026-106512 https://vulnogram.org/CVE-2026-106512 The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted-string value without sanitization. Two distinct injection vectors exis… High Tue, 06 Oct 2026 18:48:29 GMT https://vulnogram.org/CVE-2026-104914 https://vulnogram.org/CVE-2026-104914 MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for soft-deleted attributes (e.g., via the deleted-attributes search or the paginated attribute listing), the a… Medium Fri, 02 Oct 2026 16:09:40 GMT https://vulnogram.org/CVE-2026-104912 https://vulnogram.org/CVE-2026-104912 MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers correlation lookups, the system authorized access to correlated attributes and events based on a stale d… High Fri, 02 Oct 2026 16:04:50 GMT https://vulnogram.org/CVE-2026-104910 https://vulnogram.org/CVE-2026-104910 MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related event metadata directly from the correlation table without re-validat… Medium Fri, 02 Oct 2026 16:01:32 GMT https://vulnogram.org/CVE-2026-104908 https://vulnogram.org/CVE-2026-104908 MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclusively to the importing user's organisation, with the default flag for… High Fri, 02 Oct 2026 15:56:13 GMT https://vulnogram.org/CVE-2026-104907 https://vulnogram.org/CVE-2026-104907 MISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP server is configured, the event preview renders tag identifiers inside an inline JavaScript onclick attribute. The tag ID value was… Medium Fri, 02 Oct 2026 15:51:34 GMT https://vulnogram.org/CVE-2026-104906 https://vulnogram.org/CVE-2026-104906 MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered directly into an HTML pre block without HTML-encoding. An attacker who can… Medium Fri, 02 Oct 2026 15:49:32 GMT https://vulnogram.org/CVE-2026-104901 https://vulnogram.org/CVE-2026-104901 MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translator page, the application queries linked (remote) MISP servers for corresponding event identifiers. The event ID returned by the re… Medium Network Exploitable Fri, 02 Oct 2026 15:21:53 GMT https://vulnogram.org/CVE-2026-104900 https://vulnogram.org/CVE-2026-104900 MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL but rendered the field value without HTML encoding. An attacker with th… Medium Fri, 02 Oct 2026 15:16:27 GMT https://vulnogram.org/CVE-2026-103858 https://vulnogram.org/CVE-2026-103858 MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only verified whether the target thread was restricted to a single organiz… Medium Thu, 01 Oct 2026 11:31:32 GMT https://vulnogram.org/CVE-2026-103664 https://vulnogram.org/CVE-2026-103664 MISP contains a reflected cross-site scripting (XSS) vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via the URL, was passed directly into inline JavaScript within the rendered HTML response without any sa… Medium Thu, 01 Oct 2026 08:55:51 GMT https://vulnogram.org/CVE-2026-103662 https://vulnogram.org/CVE-2026-103662 MISP contains a reflected cross-site scripting (XSS) vulnerability in the legacy taxonomy tag management confirmation forms (add tag and disable tag). The affected forms echoed a user-supplied tag name value from the request unescaped into the render… Medium Network Exploitable Thu, 01 Oct 2026 08:48:38 GMT https://vulnogram.org/CVE-2026-103659 https://vulnogram.org/CVE-2026-103659 MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attri… High Thu, 01 Oct 2026 08:33:05 GMT https://vulnogram.org/CVE-2026-103655 https://vulnogram.org/CVE-2026-103655 MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP co… Critical Network Exploitable Thu, 01 Oct 2026 08:08:55 GMT https://vulnogram.org/CVE-2026-103651 https://vulnogram.org/CVE-2026-103651 MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token counter. The HOTP verification logic compared the submitted token against a counter value… High Thu, 01 Oct 2026 07:34:02 GMT https://vulnogram.org/CVE-2026-103389 https://vulnogram.org/CVE-2026-103389 MISP contains a stored cross-site scripting (XSS) vulnerability in the galaxy icon handling path. The icon field of a galaxy object was persisted without any server-side validation through the galaxy add, edit, and sync/import capture endpoints. The… Medium Wed, 30 Sep 2026 14:25:59 GMT https://vulnogram.org/CVE-2026-103388 https://vulnogram.org/CVE-2026-103388 MISP renders the source field of a Galaxy Cluster as a clickable hyperlink whenever the stored value passes PHP's FILTER_VALIDATE_URL validation. Because FILTER_VALIDATE_URL accepts the javascript: URI scheme, a user with galaxy editor privileges on… Medium Wed, 30 Sep 2026 14:22:36 GMT https://vulnogram.org/CVE-2026-103321 https://vulnogram.org/CVE-2026-103321 MISP contains a stored cross-site script (XSS) vulnerability in the event graph preview feature. The event graph preview image field was accepted and stored without server-side validation. On the client side, the stored value was rendered into an HTM… High Wed, 30 Sep 2026 12:19:01 GMT https://vulnogram.org/CVE-2026-103239 https://vulnogram.org/CVE-2026-103239 MISP contains a privilege escalation vulnerability in the tag collection creation and editing functionality. The affected actions accepted the full HTTP request payload and passed it to a bulk-association save operation, which writes not only the int… High Wed, 30 Sep 2026 10:16:18 GMT https://vulnogram.org/CVE-2026-103237 https://vulnogram.org/CVE-2026-103237 MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints (attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, o… High Wed, 30 Sep 2026 09:56:35 GMT https://vulnogram.org/CVE-2026-103235 https://vulnogram.org/CVE-2026-103235 MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the ent… High Wed, 30 Sep 2026 09:09:36 GMT https://vulnogram.org/CVE-2026-101041 https://vulnogram.org/CVE-2026-101041 The account recovery (password reset) functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use (TOCTOU) race condition in the consumption of single-use recovery tokens. The original implementation verified the… Medium Network Exploitable Sun, 27 Sep 2026 14:47:57 GMT https://vulnogram.org/CVE-2026-100190 https://vulnogram.org/CVE-2026-100190 The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data originating from imported crawler captures—specifically item IDs, URLs, and screenshot file paths—was interpo… Medium Fri, 25 Sep 2026 13:52:19 GMT https://vulnogram.org/CVE-2026-100187 https://vulnogram.org/CVE-2026-100187 The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a length check (exactly 69 characters) and a suffix check (ending in ".onion"), without performi… Medium Network Exploitable Fri, 25 Sep 2026 13:42:16 GMT https://vulnogram.org/CVE-2026-100177 https://vulnogram.org/CVE-2026-100177 The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar UUID to attach to a one-shot or scheduled crawler task. The original code only verified that the cookiej… Medium Fri, 25 Sep 2026 13:35:50 GMT https://vulnogram.org/CVE-2026-100176 https://vulnogram.org/CVE-2026-100176 The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS). Usernames imported from chats and crawled forums are stored without character restrictions. When an authenticated analyst views the username timeline, t… High Network Exploitable Fri, 25 Sep 2026 13:29:17 GMT https://vulnogram.org/CVE-2026-100174 https://vulnogram.org/CVE-2026-100174 The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a custom tag could embed an HTML payload containing JavaScript event handlers (e.g., <img src=x… Medium Fri, 25 Sep 2026 13:22:38 GMT https://vulnogram.org/CVE-2026-100172 https://vulnogram.org/CVE-2026-100172 The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for matched, tracked, or tagged content: var/www/templates/chats_explorer/block_message.html and var… High Fri, 25 Sep 2026 13:13:56 GMT https://vulnogram.org/CVE-2026-97898 https://vulnogram.org/CVE-2026-97898 Insecure Direct Object Reference / missing object-level authorization in the Akia keyless entry cloud service. The unlock action is relying on a client-supplied room/door identifier that is not properly authorized server-side against the authenticate… High Network Exploitable Cloud Hosted Fri, 25 Sep 2026 10:07:35 GMT https://vulnogram.org/CVE-2026-97863 https://vulnogram.org/CVE-2026-97863 The cisco_firesight_manager_ACL_rule_export module in misp-modules generates a shell script (.sh) that authenticates to and calls the Cisco fireSIGHT Manager API. The module interpolates configuration values (IP address, login, password, domain ID, p… Medium Fri, 25 Sep 2026 08:03:24 GMT https://vulnogram.org/CVE-2026-95806 https://vulnogram.org/CVE-2026-95806 MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point. The phar stream wrapper causes PHP to treat a phar archive as a directory, which has two security consequences: - any filesystem operation o… High Tue, 22 Sep 2026 15:09:09 GMT https://vulnogram.org/CVE-2026-95805 https://vulnogram.org/CVE-2026-95805 A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'theming_enabled*' (with a trailing asterisk) instead of the correct 'theming_enabled'. In the M… Medium Tue, 22 Sep 2026 14:59:22 GMT https://vulnogram.org/CVE-2026-95754 https://vulnogram.org/CVE-2026-95754 In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor authentication) verification branch did not include the User.disabled column in its SELECT fields list. The query selected only User.passwor… Medium Network Exploitable Tue, 22 Sep 2026 14:53:56 GMT https://vulnogram.org/CVE-2026-95703 https://vulnogram.org/CVE-2026-95703 In MISP, the OrganisationsController::__uploadLogo method processed a caller-supplied tmp_name value with filesystem probes (file_exists, MIME type detection, EXIF reading) before verifying that the value corresponded to a genuine PHP file upload via… Medium Tue, 22 Sep 2026 14:49:42 GMT https://vulnogram.org/CVE-2026-95701 https://vulnogram.org/CVE-2026-95701 In MISP, the __statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called file_exists() with a path construc… Medium Tue, 22 Sep 2026 14:44:21 GMT https://vulnogram.org/CVE-2026-95698 https://vulnogram.org/CVE-2026-95698 The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls file_exists() on the resulting path. The organization n… Medium Tue, 22 Sep 2026 14:36:35 GMT