CVE-2026-86452高 7.5Affected versions of MISP permit unauthenticated or weakly constrained request paths to perform persistent work without adequate input bound…
CVE-2026-86451中 4.3Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data(…
CVE-2026-86441中 4.3Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information.
Severa…
CVE-2026-86440中 5.4Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget.
The widget's URL is stor…
CVE-2026-86419緊急 9.1Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery fu…