MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 7.1, CVEs: CVE-2026-112188, Summary: MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.
EPSS 0.00 CVSS 7.1 CVE-2026-112188 MISP FI