Misp
135 CVEs tracked since 2019. Since May 2019, none of them reached CISA KEV.
Misp CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2019-05 | 3 | 0 |
| 2019-06 | null or fewer | |
| 2019-07 | null or fewer | |
| 2019-08 | null or fewer | |
| 2019-09 | null or fewer | |
| 2019-10 | null or fewer | |
| 2019-11 | null or fewer | |
| 2019-12 | null or fewer | |
| 2020-01 | null or fewer | |
| 2020-02 | 5 | 0 |
| 2020-03 | null or fewer | |
| 2020-04 | null or fewer | |
| 2020-05 | null or fewer | |
| 2020-06 | 3 | 0 |
| 2020-07 | null or fewer | |
| 2020-08 | null or fewer | |
| 2020-09 | null or fewer | |
| 2020-10 | null or fewer | |
| 2020-11 | 3 | 0 |
| 2020-12 | null or fewer | |
| 2021-01 | 5 | 0 |
| 2021-02 | null or fewer | |
| 2021-03 | null or fewer | |
| 2021-04 | null or fewer | |
| 2021-05 | null or fewer | |
| 2021-06 | null or fewer | |
| 2021-07 | 4 | 0 |
| 2021-08 | null or fewer | |
| 2021-09 | null or fewer | |
| 2021-10 | null or fewer | |
| 2021-11 | null or fewer | |
| 2021-12 | null or fewer | |
| 2022-01 | null or fewer | |
| 2022-02 | null or fewer | |
| 2022-03 | 4 | 0 |
| 2022-04 | 7 | 0 |
| 2022-05 | null or fewer | |
| 2022-06 | null or fewer | |
| 2022-07 | null or fewer | |
| 2022-08 | null or fewer | |
| 2022-09 | null or fewer | |
| 2022-10 | null or fewer | |
| 2022-11 | null or fewer | |
| 2022-12 | null or fewer | |
| 2023-01 | null or fewer | |
| 2023-02 | null or fewer | |
| 2023-03 | null or fewer | |
| 2023-04 | null or fewer | |
| 2023-05 | null or fewer | |
| 2023-06 | null or fewer | |
| 2023-07 | null or fewer | |
| 2023-08 | null or fewer | |
| 2023-09 | null or fewer | |
| 2023-10 | null or fewer | |
| 2023-11 | null or fewer | |
| 2023-12 | null or fewer | |
| 2024-01 | null or fewer | |
| 2024-02 | null or fewer | |
| 2024-03 | null or fewer | |
| 2024-04 | null or fewer | |
| 2024-05 | null or fewer | |
| 2024-06 | null or fewer | |
| 2024-07 | null or fewer | |
| 2024-08 | null or fewer | |
| 2024-09 | null or fewer | |
| 2024-10 | null or fewer | |
| 2024-11 | null or fewer | |
| 2024-12 | null or fewer | |
| 2025-01 | null or fewer | |
| 2025-02 | null or fewer | |
| 2025-03 | null or fewer | |
| 2025-04 | null or fewer | |
| 2025-05 | null or fewer | |
| 2025-06 | null or fewer | |
| 2025-07 | null or fewer | |
| 2025-08 | null or fewer | |
| 2025-09 | null or fewer | |
| 2025-10 | null or fewer | |
| 2025-11 | null or fewer | |
| 2025-12 | null or fewer | |
| 2026-01 | null or fewer | |
| 2026-02 | null or fewer | |
| 2026-03 | null or fewer | |
| 2026-04 | null or fewer | |
| 2026-05 | 10 | 0 |
| 2026-06 | 28 | 0 |
| 2026-07 | null or fewer | |
| 2026-08 | 20 | 0 |
| 2026-09 | 43 | 0 |
Products
The products that kept showing up in Misp's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Misp.
- CVE-2026-97863misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values—
- CVE-2026-95806MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths—
- CVE-2026-95805MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction—
- CVE-2026-95754MISP: Disabled-user check ineffective in pre-authentication TOTP login branch—
- CVE-2026-95703MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name—
- CVE-2026-95701MISP Path Traversal via Organization Name in Org-Statistics Logo Check—
- CVE-2026-95698MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name—
- CVE-2026-95697MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata—
- CVE-2026-95693MISP Information Disclosure via Forged Upload Path—
- CVE-2026-95685MISP Missing Authorization on replaceSuggestionInReport Event Report Action—
- CVE-2026-95683MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL—
- CVE-2026-95682MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View—
- CVE-2026-95679MISP Unauthenticated Blind SSRF via XML Body Processing—
- CVE-2026-95674MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation—
- CVE-2026-95671MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add—
The record
- Peak rank
- #23 in Sep 2026
- Busiest month shown
- Sep 2026, 43 CVEs
- Months with a KEV entry
- 0 since May 2019
- Monthly snapshots
- 12 since 2019