CVE-2026-85236 | MISP up to 2.5.45 Events cullEmptyEvents cross-site request forgery (2b6b3ac90)

September 3, 2026 Yanac

A vulnerability, which was classified as problematic, was found in MISP up to 2.5.45. This vulnerability affects the function cullEmptyEvents of the component Events. Such manipulation leads to cross-site request forgery.

This vulnerability is documented as CVE-2026-85236. The attack can be executed remotely. There is not any exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More