Skip to contentMisp Cti-transmute vulnerabilities
- misp cti-transmutecti-transmute CSRF Allows Unauthorized Follow and Notification State ChangesCVE-2026-731625.3 Medium
- misp cti-transmutecti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search HighlightingCVE-2026-731615.1 Medium
- misp cti-transmutecti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP AddressesCVE-2026-731608.7 High
- misp cti-transmutecti-transmute Stored XSS via Crafted Tag Icon on Admin Triage InterfaceCVE-2026-731595.1 Medium
- misp cti-transmutecti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIconCVE-2026-731585.1 Medium
- misp cti-transmutecti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event MetadataCVE-2026-731572.3 Low
- misp cti-transmutecti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion DataCVE-2026-731565.3 Medium
- misp cti-transmutecti-transmute Missing Authorization Allows Reactions to Private CommentsCVE-2026-731555.3 Medium
- misp cti-transmutecti-transmute Evaluation Report Exports Expose Private Comments and Author InformationCVE-2026-731405.3 Medium
- misp cti-transmutecti-transmute Following List Exposes User Email Addresses to Authenticated UsersCVE-2026-727605.3 Medium
- misp cti-transmutecti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion DeletionCVE-2026-727596.9 Medium
- misp cti-transmuteStored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP ContentCVE-2026-727515.1 Medium
- misp cti-transmuteUnauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-TransmuteCVE-2026-715025.1 Medium
- misp cti-transmuteCross-Site Request Forgery in the Administrative User Deletion EndpointCVE-2026-690828.8 High
- misp cti-transmuteUnauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-TransmuteCVE-2026-690798.7 High
- misp cti-transmuteServer-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF RenderingCVE-2026-690788.8 High
- misp cti-transmuteStored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert NamesCVE-2026-9806Public exploit6.3 Medium