CVE-2026-128637 | MISP misp-modules Login Endpoint account.py next redirect

November 13, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in MISP misp-modules. Affected is an unknown function of the file website/app/account/account.py of the component Login Endpoint. This manipulation of the argument Next causes open redirect.

This vulnerability appears as CVE-2026-128637. The attack may be initiated remotely. There is no available exploit.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More