https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T06:18:35.070457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0515 certfr-2026-avi-0515 — De multiples vulnérabilités ont été découvertes dans MISP. Elles permettent à un attaquant de provoquer une élévation d… 2026-10-04T06:18:35.107861+00:00 certfr-2026-avi-0515 https://cve.radiocsirt.org/vuln/euvd-2026-318545 EUVD-2026-318545 2026-10-04T06:18:35.107900+00:00 EUVD-2026-318545 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44381 fkie_cve-2026-44381 2026-10-04T06:18:35.107914+00:00

MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, a SQL injection vulnerability existed in the handling of user-controlled ordering parameters in the event and shadow attribute listing endpoints. The affected code accepted order or sort values from request parameters and incorporated them into database query ordering clauses without sufficient validation of the requested field name. An attacker with access to the affected endpoints could craft a malicious ordering parameter to manipulate the generated SQL query. Depending on database permissions and query context, this could potentially allow unauthorized access to data, modification of query behavior, or other database-level impact. This vulnerability is fixed in 2.5.37.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1547 WID-SEC-W-2026-1547 — MISP und MISP Modules: Mehrere Schwachstellen 2026-10-04T06:18:35.107946+00:00

Ein Angreifer kann mehrere Schwachstellen in MISP und MISP Modules ausnutzen, um Informationen offenzulegen, um Admin-Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.