CVE-2026-127046 | MISP Modules up to 3.1.4 external_tools module models.py api_key information disclosure

November 12, 2026 Yanac

A vulnerability categorized as problematic has been discovered in MISP Modules up to 3.1.4. This vulnerability affects unknown code of the file models.py of the component external_tools module. Executing a manipulation of the argument api_key can lead to information disclosure.

This vulnerability appears as CVE-2026-127046. The attack may be performed from remote. There is no available exploit.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More