https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:57:15.543832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0515 certfr-2026-avi-0515 — De multiples vulnérabilités ont été découvertes dans MISP. Elles permettent à un attaquant de provoquer une élévation d… 2026-10-06T11:57:15.546812+00:00 certfr-2026-avi-0515 https://cve.radiocsirt.org/vuln/euvd-2026-322671 EUVD-2026-322671 2026-10-06T11:57:15.546856+00:00 EUVD-2026-322671 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9137 fkie_cve-2026-9137 2026-10-06T11:57:15.546876+00:00

The CSP report endpoint in MISP intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reachable by untrusted clients, this could allow attackers to generate excessive log volume and contribute to resource exhaustion or log flooding.

 https://cve.radiocsirt.org/vuln/ghsa-gfvj-j222-m85v GHSA-gfvj-j222-m85v 2026-10-06T11:57:15.546917+00:00

The CSP report endpoint intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reachable by untrusted clients, this could allow attackers to generate excessive log volume and contribute to resource exhaustion or log flooding.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1631 WID-SEC-W-2026-1631 — MISP: Mehrere Schwachstellen 2026-10-06T11:57:15.546945+00:00

Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, und um einen Denial of Service Angriff durchzuführen.