Attributed metadata history
Up to 100 retained publisher events per page for d29ef14414dc1f1e07da6dc70cc159d568e7685ac59b4cfc176d131180b140fb. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_3d2122a1e906762671
observed · 2026-10-12 08:59:03 UTC
This is a security release. It closes a large batch of findings from the autumn 2026 review round, and every instance should be updated. Alongside the security work it brings a new XLSX export, tag removal from misp-module results, and a set of sync, ACL and correlation bug fixes. Security 2.5.48 fixes 20 vulnerabilities, plus 6 further hardening changes made during the same review. They cover stored and reflected cross-site scripting, mass-assignment and record-targeting flaws, event and object access-control gaps, multi-factor authentication token reuse, and the handling of data received from linked servers. Individual findings are not detailed here. They are published on the MISP security page as the advisories go out, and (G)CVE identifiers and severity scores are being processed by the GCVE team. Thanks to the reporters Our thanks go to everyone who reported to us in this round, for the quality of the reports and for their patience through a long coordinated-disclosure cycle: Jeroen Pinoy David André - elhoim (https://github.com/elhoim) Wenhao Wu Bastien Bossiroy of NCIA Célien Desteucq of NCIA Tanguy Snoeck of NCIA Jan Verschueren of NCIA Several of the findings in this
Fingerprint: 2946334f1586b509fc112edc665fffb4315010dfe68ec691820fbc3910433285
intelligence_src_3d2122a1e906762671
observed · 2026-10-12 08:59:03 UTC
available
Fingerprint: 2d40e5d02638247bd37c409b509a4988cad30a5869997d815e16c0dbe791fdbe