Query Enrichment Vulnerability in MISP by MISP Project
CVE-2026-95674

5.3MEDIUM

Key Information:

Vendor

Misp

Status
Misp
Vendor
CVE Published:
22 September 2026

What is CVE-2026-95674?

A vulnerability exists in MISP's EventsController.php where the queryEnrichment method allows authenticated users to exploit the module name parameter. If a specified module is not on the enabled modules list, the code does not reject the request but continues execution using default parameters. This lack of validation enables users to trigger enrichment or analysis processes with unauthorized modules, potentially exposing sensitive functionalities that have not been sanctioned by the system administrator.

Affected Version(s)

MISP 0 < 2.5.47

References

https://github.com/MISP/MISP/commit/7dfcc4d32
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeroen Pinoy
iglocska
.