https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:34:44 +0000 https://vulnerability.circl.lu/vuln/cve-2026-107278 <p><strong>Affected:</strong> MISP</p> <p>MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance&#39;s validation rule rejects the object because the description field is empty. As a result, the receiving instance silently drops the object along with all of its associated attributes, leading to loss of threat-intelligence data.</p> <p>Preconditions:</p> <p>- Two or more MISP instances are configured to synchronize objects.</p> <p>- A user with object-creation privileges creates an object without supplying a description.</p> <p>- The object is subsequently synced to a peer instance.</p> <p>Impact:</p> <p>- Valid objects and their attributes are silently discarded on receiving instances, causing data-integrity loss in the threat-intelligence pipeline.</p> <p>- The issue is not externally exploitable in a traditional sense but can be triggered by any authorized user who creates objects without descriptions, resulting in unintended data loss across the sync topology.</p> <p>Affected: &lt;2.5.48.</p> <p><strong>Affected:</strong> MISP</p> <p>MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance&#39;s validation rule rejects the object because the description field is empty. As a result, the receiving instance silently drops the object along with all of its associated attributes, leading to loss of threat-intelligence data.</p> <p>Preconditions:</p> <p>- Two or more MISP instances are configured to synchronize objects.</p> <p>- A user with object-creation privileges creates an object without supplying a description.</p> <p>- The object is subsequently synced to a peer instance.</p> <p>Impact:</p> <p>- Valid objects and their attributes are silently discarded on receiving instances, causing data-integrity loss in the threat-intelligence pipeline.</p> <p>- The issue is not externally exploitable in a traditional sense but can be triggered by any authorized user who creates objects without descriptions, resulting in unintended data loss across the sync topology.</p> <p>Affected: &lt;2.5.48.</p> https://vulnerability.circl.lu/vuln/cve-2026-107278