CVE-2026-112188

MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. The settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name (such as Security, MISP, or Plugin) is supplied instead of a specific leaf setting, the function returns the entire sub-tree. Because a branch node does not carry a redaction flag, the redaction check in the settings retrieval endpoint is bypassed, and the full branch contents are returned to the caller. This exposes sensitive values including the security salt, Redis connection passwords, and plugin API keys. A second endpoint that edits server settings similarly reads the entire configuration store when a branch name is resolved, returning all settings to the caller. The impact is disclosure of sensitive server configuration secrets to any user who can access the server settings endpoints. Affected versions: <2.5.48.

• CWE-200
• CWE-285

• https://github.com/MISP/MISP/commit/30b849102

Published

Oct 19, 2026

Last Modified

Oct 19, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-112178MISP contains an access control flaw in the proposal (shadow…7.1
• CVE-2026-112179In MISP, the event synchronization process contained a logic…5.3
• CVE-2026-11218Inappropriate implementation in PlatformIntegration in Googl…6.8
• CVE-2026-112180MISP contains a data integrity flaw in its event deletion lo…5.1
• CVE-2026-112183MISP contains a CSS injection vulnerability in the remote ev…4.8
• CVE-2026-112184MISP contains a reflected cross-site scripting (XSS) vulnera…4.8
• CVE-2026-11219Inappropriate implementation in Navigation in Google Chrome …4.3
• CVE-2026-112190A security vulnerability has been detected in Webkul Aureus …5.3
• CVE-2026-112192MISP contains a vulnerability in the handling of module plug…5.3
• CVE-2026-112193A vulnerability was detected in Webkul Aureus ERP up to 1.6.…3.7
• CVE-2026-112195A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. …4.7
• CVE-2026-112199Improper Neutralization of Input During Web Page Generation …6.5