CWE-223

CVEs classified under CWE-223, newest first.

2 CVEsRSS

CVE-2026-91859Medium· 5.3

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering runs the application startup path a second time

Affected versions of MISP can record incorrect access-log data for requests that terminate in an exception. Because CakeErrorController extends AppController, exception rendering runs the application startup path a second time. As a re…

▾ SunlitMISP · MISPEPSS 0.30%via NVD

CVE-2026-90955Medium· 4.6

1w ago

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID

Affected versions of MISP’s interactive CLI shell do not reliably preserve the identity of the impersonated MISP user across audit logging. The shell is designed to run actions as a supplied MISP user ID. However, the legacy SysLogLoga…

▾ SunlitMISP · MISPEPSS 0.11%via NVD