CVE-2026-127016

Vendor

Misp

Product

misp-modules

CVSS v4.0

9.2 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-862

Exposure class

Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   CVE NVD 1h ago

   The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not…

   The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not enforce the optional administrator authentication policy. When ADMIN_PASSWORD was…

   CVSS 9.2 CVE-2026-127016 Misp