Vendor
Misp vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 68 vulnerabilities in Misp: 4 in the last 7 days and 56 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-127046, was published on 12 November 2026. 5 vulnerabilities in the last four weeks, down 83% on the four before (30). 2 technologies have a page of their own.
- Last 7 days
- 4
- Last 90 days
- 56
- Critical, all time
- 1
- Exploited in the wild
- 0
About Misp
MISP is an open-source threat intelligence platform for sharing, storing, and analyzing cybersecurity threat indicators.
Misp technologies
Latest Misp vulnerabilities
- CVE-2026-127046: MISP Modules external_tools API key disclosureinfo
- CVE-2026-127016: MISP Modules authorization bypass in external tools managementinfo
- CVE-2026-126991: MISP misp-modules Wikidata SPARQL injectioninfo
- CVE-2026-125871: MISP Modules sourcecache SSRF in URL validationinfo
- CVE-2026-118173: MISP Guard taxonomy tag validation bypassinfo
- CVE-2026-116469: MISP Guard case-sensitivity bypass in policy enforcementinfo
- CVE-2026-116372: MISP mispguard HTTP status code bypass in feed filteringinfo
- CVE-2026-112183: MISP CSS injection in remote event previewinfo
- CVE-2026-112178: MISP access control flaw in proposal visibility logicinfo
- CVE-2026-104912: MISP authorization flaw in correlation handlinginfoEPSS 0.2%
- CVE-2026-104908: MISP improper input validation in decaying model importinfoEPSS 0.3%
- CVE-2026-103662: MISP reflected XSS in taxonomy tag confirmation formsinfoEPSS 0.3%
- CVE-2026-103655: MISP TOTP verification code reuse vulnerabilityinfoEPSS 0.3%
- CVE-2026-103389: MISP stored cross-site scripting in galaxy icon handlinginfo
- CVE-2026-103321: MISP stored cross-site script in event graph previewinfo
- CVE-2026-103239: MISP privilege escalation in tag collection editinfo
- CVE-2026-103237: MISP improper input validation in ORM save pathinfo
- CVE-2026-97863: misp-modules cisco_firesight_manager_ACL_rule_export shell injectioninfoEPSS 0.3%
- CVE-2026-95805: MISP ACL configuration typo in previewEventAttributesinfoEPSS 0.4%
- CVE-2026-95703: MISP OrganisationsController file-existence oracle in logo uploadinfoEPSS 0.5%
- CVE-2026-95698: MISP OrgImgHelper path traversal in findOrgImageinfoEPSS 0.7%
- CVE-2026-95697: MISP authorization flaw in captureOrg methodinfoEPSS 0.4%
- CVE-2026-95682: MISP stored XSS in admin email composition screeninfoEPSS 0.4%
- CVE-2026-95659: MISP reflected XSS in AnalystDataController viewForObjectinfoEPSS 0.4%
- CVE-2026-95658: MISP WorkflowsController CSRF vulnerability in moduleStatelessExecutioninfoEPSS 0.3%
Most severe Misp vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-86419: MISP SSRF and credential exposure in feed retrieval and TAXII discoverycriticalCVSS 9.1EPSS 0.4%
- CVE-2026-85237: MISP email OTP brute-force attack in authenticationhighCVSS 8.1EPSS 0.5%
- CVE-2026-86452: MISP denial-of-service via unbounded email input on unauthenticated endpointshighCVSS 7.5EPSS 0.5%
- CVE-2026-44380: MISP improper access control in authentication key resethighCVSS 7.2EPSS 0.4%
- CVE-2026-85238: MISP session fixation vulnerability in CustomAuthmediumCVSS 6.8EPSS 0.3%
- CVE-2026-86347: MISP ACL bypass in TemplatesController uploadFilemediumCVSS 6.5EPSS 0.4%
- CVE-2026-86351: MISP open redirect via insufficient homepage validationmediumCVSS 6.1EPSS 0.3%
- CVE-2026-8080: MISP Stored XSS in template element attribute handlingmediumCVSS 5.4EPSS 0.1%
- CVE-2026-44381: MISP SQL injection in event and shadow attribute listing endpointsmediumCVSS 5.3EPSS 0.2%
- CVE-2026-44379: MISP improper UUID validation in CollectionsmediumCVSS 5.3EPSS 0.2%
Vulnerabilities per week
5 vulnerabilities in the last four weeks, down 83% on the four before (30). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 2 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 8 | 0 | |
| 7 Sep 2026 | 7 | 1 | |
| 14 Sep 2026 | 11 | 0 | |
| 21 Sep 2026 | 11 | 0 | |
| 28 Sep 2026 | 8 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 2 | 0 | |
| 26 Oct 2026 | 3 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 4 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Misp vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/misp)<a href="https://junglewise.ai/threats/vendors/misp"><img src="https://junglewise.ai/threats/vendors/misp/badge.svg" alt="Misp vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/misp.json, and this page as text at https://junglewise.ai/threats/vendors/misp.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Misp vulnerabilities", https://junglewise.ai/threats/vendors/misp, 13 November 2026.