en
misp-modules is an open-source collection of Python modules maintained within the MISP project. It provides expansion, enrichment, import, export, and workflow capabilities for structured threat-intelligence data, normally integrated with MISP but also deployable as a standalone web or API service for security organizations and developers.
Official website · misp-project.orgAs of 10/05/2026, within CyStack's analyzed data, misp-modules has 2 security vulnerabilities published in the last 90 days. Of these, 1 is rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of misp-modules and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 4 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-97863misp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values | Exploitation statusNot known exploited | FixYes | Published09/25/2026 | SeverityMedium |
CVE-2026-62143Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses | Exploitation statusNot known exploited | FixYes | Published07/13/2026 | SeverityHigh |
CVE-2026-44363Unsafe remote resource fetching in expansion misp-modules | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityMedium |
CVE-2026-44364misp-modules website - Missing CSRF protection in the website home blueprint | Exploitation statusNot known exploited | FixYes | Published05/13/2026 | SeverityCritical |
