Skip to content

CVE record · 1 source

CVE-2026-127046

CVSS 9.2

The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface.

Vendor: Misp
Product: misp-modules
CVSS v4.0: 9.2 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-200, CWE-522
Exposure class: Endpoint security

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

42

CVE NVD 1h ago

The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface.

The MISP Modules website component contains an information disclosure vulnerability in the external tools management interface. The /external_tools/list endpoint returned stored API keys (the api_key field) in its JSON response…

CVSS 9.2 CVE-2026-127046 Misp