Risks
- Data integrity compromise
- Data confidentiality compromise
- Security policy bypass
- Denial of service (DoS)
- Server-side request forgery (SSRF)
- Cross-site scripting (XSS) injection
- Cross-site request forgery (CSRF) injection
Affected Systems
- MISP versions prior to 2.5.45
Summary
Multiple vulnerabilities have been discovered in MISP. Some of them allow an attacker to cause a denial of service, a compromise of data confidentiality, and a compromise of data integrity.
Solutions
Refer to the publisher's security bulletin for patches (see Documentation section).
Documentation
- MISP Security Bulletin CVE-2026-85216 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85216
- MISP Security Bulletin CVE-2026-85221 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85221
- MISP Security Bulletin CVE-2026-85226 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85226
- MISP Security Bulletin CVE-2026-85227 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85227
- MISP Security Bulletin CVE-2026-85230 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85230
- MISP Security Bulletin CVE-2026-85236 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85236
- MISP Security Bulletin CVE-2026-85237 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85237
- MISP Security Bulletin CVE-2026-85238 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85238
- MISP Security Bulletin CVE-2026-85239 of September 3, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-85239
- MISP Security Bulletin CVE-2026-86342 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86342
- MISP Security Bulletin CVE-2026-86347 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86347
- MISP Security Bulletin CVE-2026-86351 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86351
- MISP Security Bulletin CVE-2026-86408 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86408
- MISP Security Bulletin CVE-2026-86417 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86417
- MISP Security Bulletin CVE-2026-86418 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86418
- MISP Security Bulletin CVE-2026-86419 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86419
- MISP Security Bulletin CVE-2026-86440 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86440
- MISP Security Bulletin CVE-2026-86441 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86441
- MISP Security Bulletin CVE-2026-86452 of September 7, 2026 https://vulnerability.circl.lu/vuln/CVE-2026-86452
- CVE Reference CVE-2026-85216 https://www.cve.org/CVERecord?id=CVE-2026-85216
- CVE Reference CVE-2026-85221 https://www.cve.org/CVERecord?id=CVE-2026-85221
- CVE Reference CVE-2026-85226 https://www.cve.org/CVERecord?id=CVE-2026-85226
- CVE Reference CVE-2026-85227 https://www.cve.org/CVERecord?id=CVE-2026-85227
- CVE Reference CVE-2026-85230 https://www.cve.org/CVERecord?id=CVE-2026-85230
- CVE Reference CVE-2026-85236 https://www.cve.org/CVERecord?id=CVE-2026-85236
- CVE Reference CVE-2026-85237 https://www.cve.org/CVERecord?id=CVE-2026-85237
- CVE Reference CVE-2026-85238 https://www.cve.org/CVERecord?id=CVE-2026-85238
- CVE Reference CVE-2026-85239 https://www.cve.org/CVERecord?id=CVE-2026-85239
- CVE Reference CVE-2026-86342 https://www.cve.org/CVERecord?id=CVE-2026-86342
- CVE Reference CVE-2026-86347 https://www.cve.org/CVERecord?id=CVE-2026-86347
- CVE Reference CVE-2026-86351 https://www.cve.org/CVERecord?id=CVE-2026-86351
- CVE Reference CVE-2026-86408 https://www.cve.org/CVERecord?id=CVE-2026-86408
- CVE Reference CVE-2026-86417 https://www.cve.org/CVERecord?id=CVE-2026-86417
- CVE Reference CVE-2026-86418 https://www.cve.org/CVERecord?id=CVE-2026-86418
- CVE Reference CVE-2026-86419 https://www.cve.org/CVERecord?id=CVE-2026-86419
- CVE Reference CVE-2026-86440 https://www.cve.org/CVERecord?id=CVE-2026-86440
- CVE Reference CVE-2026-86441 https://www.cve.org/CVERecord?id=CVE-2026-86441
- CVE Reference CVE-2026-86452 https://www.cve.org/CVERecord?id=CVE-2026-86452