Event Template Handling Vulnerability in MISP by MISP Project
CVE-2026-85239

7.1HIGH

Key Information:

Vendor

Misp

Status
Misp
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85239?

A vulnerability in MISP's event template management allows authenticated users with template creation permissions to bypass essential validations. Specifically, the EventTemplate::beforeValidate() method fails to effectively validate encoded strings, leading to the potential for invalid event templates to be saved in the database. This can result in HTTP 500 errors during template retrieval, impacting availability for all users. The risk arises when malicious or malformed templates are stored, causing vital event template functionalities to fail until corrected. Recent patches ensure that only structured objects can be saved and that any malformed definitions are logged and replaced, thereby maintaining system reliability.

Affected Version(s)

misp 0 <= 2.5.45

References

https://github.com/MISP/MISP/commit/a90d552b3
patch

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andras Iklody
Scottish Government - National Cyber Team
Peter James
.