Product by MISP
Misp-modules
9 known vulnerabilities in Misp-modules (MISP), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-127046 | MISP Modules Website Exposes External Tool API Keys in /external_tools/list Response | — | |
| Critical | CVE-2026-127016 | MISP Modules Website: Missing Authorization on External Tool Management Endpoints | — | |
| High | CVE-2026-62143 | Misp-modules: Server-Side Request Forgery (SSRF) | — | |
| Medium | CVE-2026-112991 | MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url() | — | |
| Medium | CVE-2026-125871 | MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment | — | |
| Critical | CVE-2026-44364 | misp-modules website - Missing CSRF protection in the website home blueprint | — | |
| Medium | CVE-2026-97863 | Misp-modules: OS Command Injection | — | |
| Medium | CVE-2026-126991 | SPARQL Injection in MISP Wikidata Lookup Module via Unescaped User Input | — | |
| Medium | CVE-2026-44363 | Unsafe remote resource fetching in expansion misp-modules | — |