CVE-2026-107175 | CIRCL MISP up to 2.5.47 Correlation Engine before-save hook distribution/sharing_group_id information disclosure (19a389d19)

October 7, 2026 Yanac

A vulnerability categorized as problematic has been discovered in CIRCL MISP up to 2.5.47. The impacted element is the function before-save hook of the component Correlation Engine. Executing a manipulation of the argument distribution/sharing_group_id can lead to information disclosure.

This vulnerability is tracked as CVE-2026-107175. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More