https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:57:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-368470 EUVD-2026-368470 https://cve.radiocsirt.org/vuln/euvd-2026-368470 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92003 <p>Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.</p> <p>Two API authentication failure branches wrote directly to the Log model:</p> <p>- API requests with no authentication key;  - requests supplying an API key with an incorrect length</p> <p>Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry.</p> <p>Version affected: ≤2.5.45</p> <p>Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.</p> <p>Two API authentication failure branches wrote directly to the Log model:</p> <p>- API requests with no authentication key;  - requests supplying an API key with an incorrect length</p> <p>Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry.</p> <p>Version affected: ≤2.5.45</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-92003 https://cve.radiocsirt.org/vuln/ghsa-rr6q-fmv4-p23m <p>Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.</p> <p>Two API authentication failure branches wrote directly to the Log model:</p> <p>- API requests with no authentication key;  - requests supplying an API key with an incorrect length</p> <p>Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry.</p> <p>Version affected: ≤2.5.45</p> <p>Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle.</p> <p>Two API authentication failure branches wrote directly to the Log model:</p> <p>- API requests with no authentication key;  - requests supplying an API key with an incorrect length</p> <p>Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry.</p> <p>Version affected: ≤2.5.45</p> https://cve.radiocsirt.org/vuln/ghsa-rr6q-fmv4-p23m https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3411 <p>Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um Dateien zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3411