Multiple Critical Vulnerabilities in MISP Threat Intelligence Platform

CERT-Bund published a critical security advisory identifying multiple vulnerabilities in MISP (Malware Information Sharing Platform), an open-source threat intelligence platform. Affected versions are Open Source MISP below version 2.5.36. The vulnerabilities received a CVSS Base Score of 9.6 (critical severity) and a Temporal Score of 8.3.

Organizations using MISP for threat intelligence sharing should evaluate their exposure to these vulnerabilities, apply available patches or workarounds immediately, and monitor for updates. The advisory confirms remote attack is possible, meaning threat actors can exploit these flaws over a network without prior access to the system.