Login Request a demo
MI
Product
misp
by misp · last CVE Oct 19, 2026
142
CVEs
0
On KEV
10.0
Max CVSS
31
New 30D
Vulnerabilities142In the news0Timeline
Severity mix
Critical 9High 43Medium 90Low 0
Severity
All severities142Critical9High43Medium90Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add misp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-10611
10.0
0%
Jun 2
OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled
Affected: through 2.5.38
CVE-2026-85216
9.8
1%
Sep 3
MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials
Affected: through 2.5.45
CVE-2026-39962
9.6
0%
Apr 9
LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable
Affected: < 2.5.36
CVE-2026-56422
9.4
1%
Jun 22
MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields
Affected: through 2.5.41
CVE-2026-103655
9.3
0%
Oct 1
MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period
Affected: before 2.5.48
CVE-2026-90961
9.3
1%
Sep 14
MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials
Affected: before 2.5.46
CVE-2026-86419
9.1
0%
Sep 7
MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery
Affected: through 2.5.45
CVE-2026-85221
9.1
0%
Sep 3
MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks
Affected: through 2.5.45
CVE-2026-10868
9.0
0%
Jun 4
MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification
Affected: through 2.5.38
Showing 9