https://127.0.0.1:10001 Latest vulnerabilities published by the CNAs operating under the ENISA root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:09:12 +0000 https://127.0.0.1:10001/vuln/cve-2026-104914 MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View https://127.0.0.1:10001/vuln/cve-2026-104914 Fri, 02 Oct 2026 16:09:40 +0000 https://127.0.0.1:10001/vuln/cve-2026-104912 MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data MISP Correlation Authorization Bypass Exposes Restricted Event and Attribute Data https://127.0.0.1:10001/vuln/cve-2026-104912 Fri, 02 Oct 2026 16:04:50 +0000 https://127.0.0.1:10001/vuln/cve-2026-104910 MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization MISP Information Disclosure via Related Events Listing Bypassing Per-Event Authorization https://127.0.0.1:10001/vuln/cve-2026-104910 Fri, 02 Oct 2026 16:01:32 +0000 https://127.0.0.1:10001/vuln/cve-2026-104908 MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging MISP Decaying Model Import Mass Assignment Allows Cross-Organization Model Overwrite and Default Flagging https://127.0.0.1:10001/vuln/cve-2026-104908 Fri, 02 Oct 2026 15:56:13 +0000 https://127.0.0.1:10001/vuln/cve-2026-104907 MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler MISP: JavaScript Injection via Remote Tag ID in Event Preview Inline Handler https://127.0.0.1:10001/vuln/cve-2026-104907 Fri, 02 Oct 2026 15:51:34 +0000 https://127.0.0.1:10001/vuln/cve-2026-104906 MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output MISP TAXII Object Viewer Stored XSS via Unescaped JSON Output https://127.0.0.1:10001/vuln/cve-2026-104906 Fri, 02 Oct 2026 15:49:32 +0000 https://127.0.0.1:10001/vuln/cve-2026-104901 MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server MISP ID Translator: Unescaped Remote Event ID Enables Cross-Site Scripting via Linked Server https://127.0.0.1:10001/vuln/cve-2026-104901 Fri, 02 Oct 2026 15:21:53 +0000 https://127.0.0.1:10001/vuln/cve-2026-104900 MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index MISP Stored XSS via Unescaped Count Field Value in Remote Event Preview Index https://127.0.0.1:10001/vuln/cve-2026-104900 Fri, 02 Oct 2026 15:16:27 +0000 https://127.0.0.1:10001/vuln/cve-2026-91784 Argument Injection leading to arbitrary process termination in gotop Argument Injection leading to arbitrary process termination in gotop https://127.0.0.1:10001/vuln/cve-2026-91784 Fri, 02 Oct 2026 08:38:42 +0000 https://127.0.0.1:10001/vuln/cve-2026-103858 MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions MISP Incomplete Thread Authorization Allows Unauthorized Read and Post Access to Discussions https://127.0.0.1:10001/vuln/cve-2026-103858 Thu, 01 Oct 2026 11:31:32 +0000