Cross-Site Scripting Vulnerability in MISP ID Translator Feature
CVE-2026-104901

5.1MEDIUM

Key Information:

Vendor

Misp

Status
Misp
Vendor
CVE Published:
2 October 2026

What is CVE-2026-104901?

MISP's ID Translator feature is susceptible to a cross-site scripting (XSS) vulnerability. When users access the ID Translator page, the application fetches event identifiers from linked MISP servers. If a malicious server is linked, it may return a crafted event ID containing harmful HTML or JavaScript. This content would be executed in the browsers of authenticated users who visit the ID Translator page. This vulnerability has the potential to enable session hijacking, credential theft, and various client-side attacks. To mitigate risks, users should ensure they are running MISP version 2.5.48 or later.

Affected Version(s)

MISP 0 < 2.5.48

References

https://github.com/MISP/MISP/commit/bd5e80c84
patch

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeroen Pinoy
iglocska
Claude Opus 5.5 (1M context)
.