What’s Vulnerable › Products
MISP cti-transmute vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.
Check whether your MISP cti-transmute version is affected
Latest MISP cti-transmute vulnerabilities
- CVE-2026-73162 — cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes (CVSS 5.3)
- CVE-2026-73161 — cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting (CVSS 5.1)
- CVE-2026-73160 — cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses (CVSS 8.7)
- CVE-2026-73159 — cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface (CVSS 5.1)
- CVE-2026-73158 — cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon (CVSS 5.1)
- CVE-2026-73157 — cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata (CVSS 2.3)
- CVE-2026-73156 — cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data (CVSS 5.3)
- CVE-2026-73155 — cti-transmute Missing Authorization Allows Reactions to Private Comments (CVSS 5.3)
- CVE-2026-73140 — cti-transmute Evaluation Report Exports Expose Private Comments and Author Information (CVSS 5.3)
- CVE-2026-72760 — cti-transmute Following List Exposes User Email Addresses to Authenticated Users (CVSS 5.3)
- CVE-2026-72759 — cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion (CVSS 6.9)
- CVE-2026-72751 — Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content (CVSS 5.1)
- CVE-2026-71502 — Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute (CVSS 5.1)
- CVE-2026-69082 — Cross-Site Request Forgery in the Administrative User Deletion Endpoint (CVSS 8.8)
- CVE-2026-69079 — Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute (CVSS 8.7)
- CVE-2026-69078 — Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering (CVSS 8.8)