https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:34:01 +0000 https://db.gcve.eu/vuln/cve-2026-94404 <p><strong>Affected:</strong> MISP</p> <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> <p><strong>Affected:</strong> MISP</p> <p>MISP has a security issue that could let an attacker change threat-intelligence data through a logged-in user’s browser without that user knowingly approving the change.</p> <p>The affected function did not properly enforce MISP’s usual protection against forged requests. Because of this, an attacker could create a malicious webpage that silently sends a request to MISP when visited by an authenticated user.</p> <p>If successful, the attacker could change details of an attribute, such as its value, type, category, comment, distribution settings, or related timestamps.</p> <p>The attack requires the victim to already be logged in to MISP and to visit an attacker-controlled page.</p> <p>The main impact is unauthorized modification of threat-intelligence data, which could lead to incorrect indicators, wrong classifications, or altered sharing settings and reduce confidence in the accuracy of the information stored in MISP.</p> <p>Version affected: &lt;2.5.47</p> https://db.gcve.eu/vuln/cve-2026-94404