misp-modules

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. MISP Modules Website: Missing Authorization on External Tool Management EndpointsCVE-2026-127016misp · CVSS 9.2 · 0.7% likely

   CWE-862

2. MISP Modules Website Exposes External Tool API Keys in /external_tools/list ResponseCVE-2026-127046misp · CVSS 9.2 · 0.5% likely

   CWE-200

3. Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addressesCVE-2026-62143misp · CVSS 8.3 · 0.4% likely

   CWE-918

4. Open Redirect in MISP Modules Website Login via Unvalidated next ParameterCVE-2026-128637misp · CVSS 5.1 · 0.3% likely

   CWE-601

5. MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()CVE-2026-112991MISP · CVSS 6.3 · 0.3% likely

   CWE-918

6. misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute ValuesCVE-2026-97863misp · CVSS 6.3 · 0.3% likely

   CWE-78

7. SPARQL Injection in MISP Wikidata Lookup Module via Unescaped User InputCVE-2026-126991misp · CVSS 5.3 · 0.3% likely

   CWE-94

8. MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichmentCVE-2026-125871MISP · CVSS 6.3 · 0.3% likely

   CWE-918

9. misp-modules website - Missing CSRF protection in the website home blueprintCVE-2026-44364MISP · CVSS 9.3 · 0.2% likely

   CWE-352

10. Unsafe remote resource fetching in expansion misp-modulesCVE-2026-44363MISP · CVSS 5.8 · 0.1% likely

    CWE-295

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.