MISP vulnerabilities: known CVEs & security history
MISP Project · Security / Threat Intel · 113 tracked CVEs · 0 actively exploited · updated August 2026 · what is a CVE? →
This is the full list of known vulnerabilities (CVEs) across all MISP release lines — 113 in total. A CVE here doesn't mean your version is affected — check MISP's current status and the safe version to run.
Known MISP CVEs
Actively-exploited and most-severe first. Showing the top 80 of 113. Open any CVE for full details.
| CVE | Severity | CVSS | EPSS | Year |
|---|---|---|---|---|
| CVE-2026-10611 | critical | 10 | 0% | 2026 |
| CVE-2024-29859 | critical | 9.8 | 1% | 2024 |
| CVE-2024-29858 | critical | 9.8 | 0% | 2024 |
| CVE-2024-25675 | critical | 9.8 | 1% | 2024 |
| CVE-2024-25674 | critical | 9.8 | 1% | 2024 |
| CVE-2023-50918 | critical | 9.8 | 1% | 2023 |
| CVE-2023-48659 | critical | 9.8 | 1% | 2023 |
| CVE-2023-48658 | critical | 9.8 | 1% | 2023 |
| CVE-2023-48657 | critical | 9.8 | 1% | 2023 |
| CVE-2023-48656 | critical | 9.8 | 1% | 2023 |
| CVE-2023-48655 | critical | 9.8 | 1% | 2023 |
| CVE-2022-48329 | critical | 9.8 | 1% | 2023 |
| CVE-2022-48328 | critical | 9.8 | 1% | 2023 |
| CVE-2022-29528 | critical | 9.8 | 2% | 2022 |
| CVE-2021-41326 | critical | 9.8 | 2% | 2021 |
| CVE-2021-39302 | critical | 9.8 | 1% | 2021 |
| CVE-2021-35502 | critical | 9.8 | 1% | 2021 |
| CVE-2020-29006 | critical | 9.8 | 1% | 2020 |
| CVE-2020-15411 | critical | 9.8 | 1% | 2020 |
| CVE-2018-12649 | critical | 9.8 | 1% | 2018 |
| CVE-2015-5721 | critical | 9.8 | 3% | 2016 |
| CVE-2015-5719 | critical | 9.8 | 2% | 2016 |
| CVE-2026-39962 | critical | 9.6 | 0% | 2026 |
| CVE-2021-25323 | critical | 9.1 | 1% | 2021 |
| CVE-2026-56425 | high | 8.8 | 0% | 2026 |
| CVE-2026-56424 | high | 8.8 | 0% | 2026 |
| CVE-2026-56423 | high | 8.8 | 0% | 2026 |
| CVE-2022-27245 | high | 8.8 | 1% | 2022 |
| CVE-2020-15711 | high | 8.8 | 0% | 2020 |
| CVE-2018-19908 | high | 8.8 | 17% | 2018 |
| CVE-2026-10863 | high | 8.1 | 0% | 2026 |
| CVE-2020-8892 | high | 8.1 | 2% | 2020 |
| CVE-2022-27243 | high | 7.8 | 1% | 2022 |
| CVE-2026-9137 | high | 7.5 | 0% | 2026 |
| CVE-2023-37306 | high | 7.5 | 0% | 2023 |
| CVE-2022-29534 | high | 7.5 | 2% | 2022 |
| CVE-2021-31780 | high | 7.5 | 1% | 2021 |
| CVE-2020-28043 | high | 7.5 | 1% | 2020 |
| CVE-2020-25766 | high | 7.5 | 1% | 2020 |
| CVE-2020-14969 | high | 7.5 | 1% | 2020 |
| CVE-2020-8893 | high | 7.5 | 2% | 2020 |
| CVE-2026-56447 | high | 7.2 | 0% | 2026 |
| CVE-2026-56446 | high | 7.2 | 0% | 2026 |
| CVE-2026-44380 | high | 7.2 | 0% | 2026 |
| CVE-2024-58130 | high | 7.2 | 0% | 2025 |
| CVE-2019-12868 | high | 7.2 | 3% | 2019 |
| CVE-2018-6926 | high | 7.2 | 2% | 2018 |
| CVE-2019-12794 | medium | 6.6 | 1% | 2019 |
| CVE-2026-10860 | medium | 6.5 | 0% | 2026 |
| CVE-2026-9136 | medium | 6.5 | 0% | 2026 |
| CVE-2024-45509 | medium | 6.5 | 0% | 2024 |
| CVE-2020-8894 | medium | 6.5 | 1% | 2020 |
| CVE-2019-16202 | medium | 6.5 | 1% | 2019 |
| CVE-2026-10861 | medium | 6.1 | 0% | 2026 |
| CVE-2026-10856 | medium | 6.1 | 0% | 2026 |
| CVE-2023-49926 | medium | 6.1 | 0% | 2023 |
| CVE-2023-41098 | medium | 6.1 | 0% | 2023 |
| CVE-2023-40224 | medium | 6.1 | 0% | 2023 |
| CVE-2023-28884 | medium | 6.1 | 0% | 2023 |
| CVE-2023-28607 | medium | 6.1 | 0% | 2023 |
| CVE-2023-28606 | medium | 6.1 | 0% | 2023 |
| CVE-2023-24070 | medium | 6.1 | 0% | 2023 |
| CVE-2023-24027 | medium | 6.1 | 0% | 2023 |
| CVE-2022-47928 | medium | 6.1 | 0% | 2022 |
| CVE-2022-29533 | medium | 6.1 | 1% | 2022 |
| CVE-2022-27246 | medium | 6.1 | 1% | 2022 |
| CVE-2021-36212 | medium | 6.1 | 1% | 2021 |
| CVE-2020-24085 | medium | 6.1 | 1% | 2021 |
| CVE-2021-3184 | medium | 6.1 | 1% | 2021 |
| CVE-2021-25325 | medium | 6.1 | 1% | 2021 |
| CVE-2021-25324 | medium | 6.1 | 1% | 2021 |
| CVE-2020-29572 | medium | 6.1 | 1% | 2020 |
| CVE-2020-28947 | medium | 6.1 | 1% | 2020 |
| CVE-2020-13153 | medium | 6.1 | 1% | 2020 |
| CVE-2020-10247 | medium | 6.1 | 1% | 2020 |
| CVE-2020-10246 | medium | 6.1 | 1% | 2020 |
| CVE-2019-14286 | medium | 6.1 | 1% | 2019 |
| CVE-2019-11814 | medium | 6.1 | 1% | 2019 |
| CVE-2019-11813 | medium | 6.1 | 1% | 2019 |
| CVE-2019-11812 | medium | 6.1 | 1% | 2019 |
33 older / lower-severity CVEs not shown — see MISP's full record.
Is my MISP version affected?
The list above spans every release. To know whether your version is affected — and the minimum safe version to upgrade to — check it directly.
Check your MISP version → · Monitor MISP for new CVEs →
MISP vulnerabilities — frequently asked
How many known vulnerabilities does MISP have?
IsItPatched tracks 113 CVEs for MISP. 24 are critical-severity and 23 high-severity. These span every release line — what matters is whether the version you run is affected.
Does MISP have any actively-exploited vulnerabilities?
None of MISP's tracked CVEs are currently in CISA's KEV catalog — but new ones can be added at any time, so keep your version current.
What is the most severe MISP vulnerability?
Among tracked issues, CVE-2026-10611 (CRITICAL, CVSS 10) ranks highest — a Improper authentication weakness.
Is MISP safe to use?
It depends on the version. The latest supported MISP release clears the known issues; older versions may still be affected. Check the exact version you run for a verdict.
CVE data aggregated from NVD, CISA KEV and EPSS (FIRST.org). Related: MISP security status · MISP end-of-life · actively-exploited CVEs. Always verify against MISP Project's advisories — see our disclaimer.