https://vulnerability.circl.lu Vulnerabilities published under the CPE names of MISP. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 07:37:41 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95806 MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths https://vulnerability.circl.lu/vuln/cve-2026-95806 Tue, 22 Sep 2026 15:09:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction https://vulnerability.circl.lu/vuln/cve-2026-95805 Tue, 22 Sep 2026 14:59:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95754 MISP: Disabled-user check ineffective in pre-authentication TOTP login branch MISP: Disabled-user check ineffective in pre-authentication TOTP login branch https://vulnerability.circl.lu/vuln/cve-2026-95754 Tue, 22 Sep 2026 14:53:56 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95679 MISP Unauthenticated Blind SSRF via XML Body Processing MISP Unauthenticated Blind SSRF via XML Body Processing https://vulnerability.circl.lu/vuln/cve-2026-95679 Tue, 22 Sep 2026 13:50:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95658 MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules https://vulnerability.circl.lu/vuln/cve-2026-95658 Tue, 22 Sep 2026 12:31:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95659 MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread https://vulnerability.circl.lu/vuln/cve-2026-95659 Tue, 22 Sep 2026 12:40:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95661 MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List https://vulnerability.circl.lu/vuln/cve-2026-95661 Tue, 22 Sep 2026 12:54:46 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95665 MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON https://vulnerability.circl.lu/vuln/cve-2026-95665 Tue, 22 Sep 2026 13:01:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95667 MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials https://vulnerability.circl.lu/vuln/cve-2026-95667 Tue, 22 Sep 2026 13:11:44 +0000 https://vulnerability.circl.lu/vuln/cve-2026-95671 MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add https://vulnerability.circl.lu/vuln/cve-2026-95671 Tue, 22 Sep 2026 13:20:25 +0000