Stored Cross-Site Scripting Vulnerability in MISP by GitHub

CVE-2026-104900

What is CVE-2026-104900?

MISP has a stored cross-site scripting vulnerability that occurs in the index table rendering of the remote event preview feature. The vulnerability enables an attacker who has privileges to create or modify events on a linked remote MISP server to inject HTML or JavaScript markup into an event identifier. When a victim views the remote event preview index page in the local MISP instance, the unencoded value is directly rendered in their browser. This results in arbitrary script execution within the context of the MISP web application, which can lead to session hijacking, data exfiltration, or unauthorized operations performed under the authenticated user's session.

References