CVE-2026-95665 | MISP up to 2.5.46 Event REST Search Export Confirmation Form eventRestSearchExportConfirmationForm.ctp json_encode cross site scripting

A vulnerability described as problematic has been identified in MISP up to 2.5.46. Affected by this issue is the function json_encode of the file app/View/Events/ajax/eventRestSearchExportConfirmationForm.ctp of the component Event REST Search Export Confirmation Form. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-95665. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More