https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:10:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-372913 EUVD-2026-372913 https://cve.radiocsirt.org/vuln/euvd-2026-372913 https://cve.radiocsirt.org/vuln/fkie_cve-2026-94404 <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-94404 https://cve.radiocsirt.org/vuln/ghsa-g7f8-8jj3-3vcp <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> https://cve.radiocsirt.org/vuln/ghsa-g7f8-8jj3-3vcp https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3490 <p>Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MISP ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen sowie Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3490