Security Filtering Flaw in MISPguard Affects MISP Instances

CVE-2026-116372

What is CVE-2026-116372?

A security flaw in MISPguard allows for potentially malicious or arbitrary content to bypass filtering mechanisms. The vulnerability arises from the process_feed_response method, which inadequately handles HTTP 2xx status codes (excluding 200). While passing through these status codes under the assumption they do not contain ingestible data, MISPguard inadvertently permits the ingestion of unfiltered feed data into the MISP instance. This misstep can enable an attacker who controls a feed endpoint to inject harmful content without the need for user authentication or interaction, thereby compromising the integrity and security of the MISP environment.

References