https://vulnerability.circl.lu/product/c5e39a71-e225-4134-bc50-37d5e41557ea/recent 2026-09-27T10:20:24.331316+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Vulnerabilities published under the CPE names of MISP. https://vulnerability.circl.lu/vuln/cve-2026-95806 2026-09-22T15:54:08.956000+00:00 MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths

2026-09-22T15:09:09.738000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95805 2026-09-22T15:53:42.092000+00:00 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

2026-09-22T14:59:22.041000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95754 2026-09-22T15:53:14.911000+00:00 MISP: Disabled-user check ineffective in pre-authentication TOTP login branch

MISP: Disabled-user check ineffective in pre-authentication TOTP login branch

2026-09-22T14:53:56.006000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95679 2026-09-22T15:37:46.734000+00:00 MISP Unauthenticated Blind SSRF via XML Body Processing

MISP Unauthenticated Blind SSRF via XML Body Processing

2026-09-22T13:50:48.696000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95658 2026-09-22T15:35:08.313000+00:00 MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules

2026-09-22T12:31:23.222000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95659 2026-09-22T15:34:41.995000+00:00 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread

2026-09-22T12:40:38.097000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95661 2026-09-22T15:34:06.853000+00:00 MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List

2026-09-22T12:54:46.496000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95665 2026-09-22T15:33:05.484000+00:00 MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON

2026-09-22T13:01:45.225000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95667 2026-09-22T15:32:43.415000+00:00 MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

2026-09-22T13:11:44.277000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-95671 2026-09-22T15:32:21.567000+00:00 MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add

2026-09-22T13:20:25.683000+00:00