CVE-2026-112184

MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels on the workflow module page without output encoding. An attacker who can influence the parameter names reported by the misp-modules service can inject arbitrary HTML or JavaScript that executes in the context of an authenticated MISP user's browser. Preconditions: - The attacker must be able to control or influence parameter names reported by the misp-modules service. - A victim must be authenticated and view the affected workflow module page. Impact: - Execution of arbitrary JavaScript in the victim's browser session. - Potential theft of session tokens, manipulation of the MISP interface, or initiation of unauthorized actions on behalf of the victim. Affected versions: <2.5.48.

• CWE-79

• https://github.com/MISP/MISP/commit/813a48b2b

Published

Oct 19, 2026

Last Modified

Oct 19, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-112177A flaw was found in Ghostscript as shipped with Red Hat Ente…7.3
• CVE-2026-112178MISP contains an access control flaw in the proposal (shadow…7.1
• CVE-2026-112179In MISP, the event synchronization process contained a logic…5.3
• CVE-2026-11218Inappropriate implementation in PlatformIntegration in Googl…6.8
• CVE-2026-112180MISP contains a data integrity flaw in its event deletion lo…5.1
• CVE-2026-112183MISP contains a CSS injection vulnerability in the remote ev…4.8
• CVE-2026-112188MISP contains a vulnerability in its server settings lookup …7.1
• CVE-2026-11219Inappropriate implementation in Navigation in Google Chrome …4.3
• CVE-2026-112190A security vulnerability has been detected in Webkul Aureus …5.3
• CVE-2026-112192MISP contains a vulnerability in the handling of module plug…5.3
• CVE-2026-112193A vulnerability was detected in Webkul Aureus ERP up to 1.6.…3.7
• CVE-2026-112195A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. …4.7