Product by MISP

    Cti-transmute

    16 known vulnerabilities in Cti-transmute (MISP), 0 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cti-transmute (MISP)
    HighCVE-2026-69079

    Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

    		—
    HighCVE-2026-73160

    cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses

    		—
    HighCVE-2026-69078

    Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering

    		—
    MediumCVE-2026-71502

    Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute

    		—
    MediumCVE-2026-72759

    MISP Cti-transmute: Missing Authorization

    		—
    HighCVE-2026-69082

    Cross-Site Request Forgery in the Administrative User Deletion Endpoint

    		—
    MediumCVE-2026-73156

    cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data

    		—
    MediumCVE-2026-72751

    Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content

    		—
    MediumCVE-2026-72760

    cti-transmute Following List Exposes User Email Addresses to Authenticated Users

    		—
    MediumCVE-2026-73159

    cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

    		—
    MediumCVE-2026-73161

    cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting

    		—
    MediumCVE-2026-73158

    cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon

    		—
    MediumCVE-2026-73155

    cti-transmute Missing Authorization Allows Reactions to Private Comments

    		—
    MediumCVE-2026-73140

    cti-transmute Evaluation Report Exports Expose Private Comments and Author Information

    		—
    MediumCVE-2026-73162

    cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes

    		—
    LowCVE-2026-73157

    cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata

    		—

    All products by MISP