{"id":"CVE-2026-112188","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-112188","generatedAt":"2026-10-28T02:59:23.708Z","title":"MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.","description":"MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted.\n\nThe settings lookup function resolves a dotted setting name to a node in the configuration tree. When a branch name (such as Security, MISP, or Plugin) is supplied instead of a specific leaf setting, the function returns the entire sub-tree. Because a branch node does not carry a redaction flag, the redaction check in the settings retrieval endpoint is bypassed, and the full branch contents are returned to the caller. This exposes sensitive values including the security salt, Redis connection passwords, and plugin API keys.\n\nA second endpoint that edits server settings similarly reads the entire configuration store when a branch name is resolved, returning all settings to the caller.\n\nThe impact is disclosure of sensitive server configuration secrets to any user who can access the server settings endpoints.\n\nAffected versions: <2.5.48.","published":"2026-10-19T10:16:47.000Z","lastModified":"2026-10-19T10:16:48.000Z","status":"Deferred","sourceIdentifier":"5a6e4751-2f3f-4070-9419-94fb35b644e8","cvss":{"version":"4.0","score":7.1,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-200","CWE-285"],"affected":[],"epss":{"score":0.00271,"percentile":0.19152,"date":"2026-10-26","history":[{"date":"2026-10-20","score":0.00271,"percentile":0.18167}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.27%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-19T10:16:47.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-19T10:16:47.413Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://github.com/MISP/MISP/commit/30b849102","source":"5a6e4751-2f3f-4070-9419-94fb35b644e8"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-112188","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}