M
Vendor security profile
misp
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs126
Critical6
CISA KEV0
Public exploit0
Patch rate%98
Avg. CVSS6.4
12-month vulnerability rate
0
0
0
0
0
0
2
8
0
20
76
20
CVE KEV
CVE severity distribution
126toplam CVE
Critical6 (5%)
High34 (27%)
Medium84 (67%)
Low2 (2%)
Patch and exploitation view
%98
Verified patch
%0
CISA KEV
%0
Public exploit
124Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
5.3
CVE-2026-107278
MISP Object Sync Drops Objects and Attributes When Description Is Empty
M
Patch verifiedEPSS %0
6.3
CVE-2026-107276
MISP Email OTP Race Condition Allows One-Time Password to Be Consumed by Multiple Concurrent Requests
M
Patch verifiedEPSS %0
7.1
CVE-2026-107180
MISP: Forced TOTP Enrolment Bypassed via Non-Browser Request Types on otp_required Instances
M
Patch verifiedEPSS %0
5.3
CVE-2026-107175
MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes
M
Patch verifiedEPSS %0
6.9
CVE-2026-106513
MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change
M
Patch verifiedEPSS %1
8.4
CVE-2026-106512
MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS
M
Patch verifiedEPSS %0
5.3
CVE-2026-104914
MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
M
Patch verifiedEPSS %0
7.1
CVE-2026-104912
MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data
M
Patch verifiedEPSS %0
5.3
CVE-2026-104910
MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization
M
Patch verifiedEPSS %0
7.1
CVE-2026-104908
MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging
M
Patch verifiedEPSS %0