CVE-2026-95659 | MISP up to 2.5.46 AnalystData Controller viewForObject cross site scripting

September 22, 2026 Yanac

A vulnerability marked as problematic has been reported in MISP up to 2.5.46. Affected by this vulnerability is the function AnalystDataController::viewForObject of the component AnalystData Controller. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2026-95659. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More