Critical vulnerability in MISP

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-103655, Summary: MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had…

Číst originál na NCSC-FI →

CZ · EN/orig

MISP FI

tg: zranitelnost tp: identita

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-103655	9.3 4.0 · CIRCL	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.4.