CVE-2026-127xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

1 records · Page 1 of 1

• CVE-2026-127016: MISP Modules Website: Missing Authorization on External Tool Management Endpoints 9.2 Critical

  The MISP Modules website component exposes external tool management endpoints (add, delete, change status, and change configuration) that did not enforce the optional administrator authentication policy. When ADMIN_PASSWORD was configured in the application environment, the module configuration endpoints correctly required an authenticated administrator session, but the external tools management h

  Updated 2026-11-12

Search a CVE ID or check dependency files →