Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| GCVE-1-2026-20093 |
8.7 (4.0)
|
MISP Unauthenticated Mail Endpoints Allow Unbounded St… |
MISP |
MISP |
2026-09-07T13:03:20.000859Z | 2026-09-07T13:03:25.655036Z |
| GCVE-1-2026-20223 |
5.3 (4.0)
|
MISP Event Graph Object Reference Lookup Exposes Refer… |
MISP |
MISP |
2026-09-07T12:59:35.971838Z | 2026-09-07T12:59:41.744409Z |
| GCVE-1-2026-20216 |
2.3 (4.0)
|
MISP Dashboard Organisation Widgets Bypass Organisatio… |
MISP |
MISP |
2026-09-07T12:39:11.343813Z | 2026-09-07T12:39:18.524831Z |
| GCVE-1-2026-20035 |
5.1 (4.0)
|
MISP Dashboard Button Widget Allows Stored XSS via Uns… |
MISP |
MISP |
2026-09-07T12:34:59.606582Z | 2026-09-07T12:35:07.407101Z |
| GCVE-1-2026-20072 |
7 (4.0)
|
MISP Insufficient Outbound URL Validation Allows SSRF … |
MISP |
MISP |
2026-09-07T12:31:23.101837Z | 2026-09-07T12:31:33.014065Z |
| GCVE-1-2026-20071 |
2.3 (4.0)
|
MISP Dashboard Organisation Picker Exposes Hidden Orga… |
MISP |
MISP |
2026-09-07T12:22:42.970388Z | 2026-09-07T12:22:51.243744Z |
| GCVE-1-2026-20045 |
5.3 (4.0)
|
MISP Dashboard Template REST API Exposes Template Owne… |
MISP |
MISP |
2026-09-07T12:17:32.418613Z | 2026-09-07T12:17:41.564144Z |
| GCVE-1-2026-20228 |
7.1 (4.0)
|
MISP Missing Authorization in Cryptographic Key View E… |
MISP |
MISP |
2026-09-07T12:11:00.737706Z | 2026-09-07T12:11:12.965404Z |
| GCVE-1-2026-20152 |
5.1 (4.0)
|
MISP User Homepage Validation Allows Authenticated Ope… |
MISP |
MISP |
2026-09-07T09:59:27.107009Z | 2026-09-07T09:59:33.009583Z |
| GCVE-1-2026-20249 |
7.1 (4.0)
|
MISP Missing Authorization on Template File Upload All… |
MISP |
MISP |
2026-09-07T09:30:49.083831Z | 2026-09-07T09:30:56.570519Z |
| GCVE-1-2026-20196 |
5.3 (4.0)
|
MISP Freetext Feed Preview Improper Authorization Expo… |
MISP |
MISP |
2026-09-07T09:02:00.000Z | 2026-09-07T09:06:12.254878Z |
| GCVE-1-2026-20028 |
7.1 (4.0)
|
MISP UiBeta Collection View Bypasses Event ACL, Exposi… |
MISP |
MISP |
2026-09-06T14:11:00.000Z | 2026-09-07T09:03:32.387841Z |
| GCVE-1-2026-20213 |
6.2 (4.0)
|
Cross-Site Request Forgery via Attacker-Controlled RES… |
misp |
misp |
2026-09-04T09:40:40.324304Z | 2026-09-04T09:40:51.160348Z |
| GCVE-1-2026-20235 |
8.6 (4.0)
|
MISP Sharing Group Quick-Edit Actions Allow CSRF via S… |
misp |
misp |
2026-09-04T09:27:14.671055Z | 2026-09-04T09:27:23.152543Z |
| GCVE-1-2026-20225 |
8.3 (4.0)
|
MISP Attribute Deletion Authorization Bypass Allows Us… |
misp |
misp |
2026-09-04T09:05:31.259324Z | 2026-09-04T09:05:38.325848Z |
| GCVE-1-2026-20143 |
7.6 (4.0)
|
MISP Sharing Group Authorization Bypass via Omitted Di… |
misp |
misp |
2026-09-04T08:53:11.134719Z | 2026-09-04T08:53:39.328442Z |
| GCVE-1-2026-20023 |
7.9 (3.1)
|
(Holloway) Chew, Kean Ho's Actualizer v1.2.0 and … |
chewkeanho |
software-actualizer |
2026-09-04T00:00:00.000Z | 2026-09-04T12:59:48.295235Z |
| GCVE-1-2026-20029 |
6.9 (4.0)
|
Server-Side Request Forgery via Favicon Redirect to Lo… |
Lookyloo |
PlaywrightCapture |
2026-09-03T16:17:09.342653Z | 2026-09-03T16:17:17.365576Z |
| GCVE-1-2026-20125 |
7.1 (4.0)
|
MISP Event Template Definition Validation Bypass Allow… |
misp |
misp |
2026-09-03T15:37:00.000Z | 2026-09-03T15:39:58.919757Z |
| GCVE-1-2026-20184 |
7.6 (4.0)
|
Session Fixation in MISP CustomAuth Authentication All… |
misp |
misp |
2026-09-03T15:29:00.000Z | 2026-09-03T15:30:33.757388Z |
| GCVE-1-2026-20211 |
8.6 (4.0)
|
Missing Rate Limiting in Email OTP Verification Allows… |
misp |
misp |
2026-09-03T15:22:47.338907Z | 2026-09-03T15:22:56.897702Z |
| GCVE-1-2026-20104 |
8.8 (4.0)
|
MISP cullEmptyEvents CSRF Allows Irreversible Deletion… |
misp |
misp |
2026-09-03T15:12:44.713069Z | 2026-09-03T15:12:56.376460Z |
| GCVE-1-2026-20238 |
5.3 (4.0)
|
MISP Dashboard Button Widget Allows Persistent JavaScr… |
misp |
misp |
2026-09-03T14:48:23.459305Z | 2026-09-03T14:48:37.037054Z |
| GCVE-1-2026-20089 |
6.1 (4.0)
|
Reflected Cross-Site Scripting in MISP Event Filtering… |
misp |
misp |
2026-09-03T14:40:50.028642Z | 2026-09-03T14:41:59.862819Z |
| GCVE-1-2026-20175 |
5.3 (4.0)
|
MISP OnDemand Correlation Engine Missing Access Contro… |
misp |
misp |
2026-09-03T14:35:01.966679Z | 2026-09-03T14:35:12.855533Z |
| GCVE-1-2026-20085 |
7.6 (4.0)
|
MISP CurlClient TLS Peer Verification Disabled by Defa… |
misp |
misp |
2026-09-03T14:16:48.294316Z | 2026-09-03T14:16:56.806725Z |
| GCVE-1-2026-20078 |
9.5 (4.0)
|
MISP LDAP and LinOTP Authentication Bypass via Empty o… |
misp |
misp |
2026-09-03T13:59:17.284986Z | 2026-09-03T13:59:30.774395Z |
| GCVE-1-2026-20121 |
6.9 (4.0)
|
Flowintel Login Email Validation Bypass Allows Log Inj… |
flowintel |
flowintel |
2026-08-27T13:36:08.933528Z | 2026-08-27T13:36:17.105936Z |
| GCVE-1-2026-20200 |
9.1 (4.0)
|
Flowintel Fails to Invalidate Active Sessions After Pa… |
flowintel |
flowintel |
2026-08-27T13:32:37.993094Z | 2026-08-27T13:32:44.650130Z |
| GCVE-1-2026-20207 |
5.1 (4.0)
|
Flowintel HTML Injection in MISP Case History Timeline… |
flowintel |
flowintel |
2026-08-27T13:24:58.362704Z | 2026-08-27T13:25:06.949370Z |