CVE-2026-73158

Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick, and Pivotick interprets svgIcon as HTML. Because saved configurations may be created by one user and later displayed to other users—including administrators—a malicious user could store a crafted svgIcon value that executes script in another viewer’s browser. The fix introduces a strict configuration schema on both the server and client. Only known properties are accepted, style entries are limited to shape, color, and size, and dangerous properties such as svgIcon and iconClass are explicitly rejected. Existing stored configurations are also sanitized when listed and again before being applied in the browser.

• CWE-20
• CWE-79

• https://github.com/MISP/cti-transmute/commit/9b317587fa4ec11b6f72c2d1d8b98a686537b4fb

Published

Aug 11, 2026

Last Modified

Aug 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7314A vulnerability was detected in eiceblue spire-doc-mcp-serve…7.3
• CVE-2026-73140Affected versions of cti-transmute fail to apply comment-lev…5.3
• CVE-2026-7315A flaw has been found in eiceblue spire-pdf-mcp-server 0.1.1…7.3
• CVE-2026-73155Affected versions of cti-transmute allow authenticated users…5.3
• CVE-2026-73156Affected versions of cti-transmute fail to HTML-escape attac…5.3
• CVE-2026-73157Affected versions of cti-transmute render data obtained from…2.3
• CVE-2026-73159Affected versions of cti-transmute allow a tag's icon value …5.1
• CVE-2026-7316A vulnerability has been found in eiliyaabedini aider-mcp up…7.3
• CVE-2026-73160Affected versions of cti-transmute contain an SSRF vulnerabi…8.7
• CVE-2026-73161Affected versions of cti-transmute improperly handle convers…5.1
• CVE-2026-73162Affected versions of MISP cti-transmute expose several state…5.3
• CVE-2026-7317A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-b…5