CVE-2026-94374 | MISP up to 2.5.46 EventReport Model processModuleResultsData ID resource injection

September 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in MISP up to 2.5.46. This affects the function processModuleResultsData of the component EventReport Model. The manipulation of the argument ID results in improper control of resource identifiers.

This vulnerability is reported as CVE-2026-94374. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More