# MISP cti-transmute. Every CVE that names MISP cti-transmute among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [cti-transmute CSRF Allows Unauthorized Follow and Notification State Changes](https://agentprime.io/advisories/CVE-2026-73162.md) `CVE-2026-73162` · CVE record: MISP cti-transmute · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site request forgery (CSRF) - [cti-transmute Conversion Table Allows XSS via Unescaped Cell Content During Search Highlighting](https://agentprime.io/advisories/CVE-2026-73161.md) `CVE-2026-73161` · CVE record: MISP cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS), CWE-116 - [cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses](https://agentprime.io/advisories/CVE-2026-73160.md) `CVE-2026-73160` · CVE record: MISP cti-transmute · CVSS 8.7 High · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF) - [cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface](https://agentprime.io/advisories/CVE-2026-73159.md) `CVE-2026-73159` · CVE record: MISP cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS) - [cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon](https://agentprime.io/advisories/CVE-2026-73158.md) `CVE-2026-73158` · CVE record: MISP cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS), CWE-20 - [cti-transmute Remote MISP Event Browser Allows Cross-Site Scripting via Malicious Event Metadata](https://agentprime.io/advisories/CVE-2026-73157.md) `CVE-2026-73157` · CVE record: MISP cti-transmute · CVSS 2.3 Low · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS), CWE-116 - [cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Crafted Conversion Data](https://agentprime.io/advisories/CVE-2026-73156.md) `CVE-2026-73156` · CVE record: MISP cti-transmute · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS) - [cti-transmute Missing Authorization Allows Reactions to Private Comments](https://agentprime.io/advisories/CVE-2026-73155.md) `CVE-2026-73155` · CVE record: MISP cti-transmute · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control - [cti-transmute Evaluation Report Exports Expose Private Comments and Author Information](https://agentprime.io/advisories/CVE-2026-73140.md) `CVE-2026-73140` · CVE record: MISP cti-transmute · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control - [cti-transmute Following List Exposes User Email Addresses to Authenticated Users](https://agentprime.io/advisories/CVE-2026-72760.md) `CVE-2026-72760` · CVE record: MISP cti-transmute · CVSS 5.3 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Information disclosure - [cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion](https://agentprime.io/advisories/CVE-2026-72759.md) `CVE-2026-72759` · CVE record: misp cti-transmute · CVSS 6.9 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control - [Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content](https://agentprime.io/advisories/CVE-2026-72751.md) `CVE-2026-72751` · CVE record: misp cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Cross-site scripting (XSS) - [Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute](https://agentprime.io/advisories/CVE-2026-71502.md) `CVE-2026-71502` · CVE record: misp cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Cross-Site Request Forgery in the Administrative User Deletion Endpoint](https://agentprime.io/advisories/CVE-2026-69082.md) `CVE-2026-69082` · CVE record: misp cti-transmute · CVSS 8.8 High · Not analysed yet · Published 3 Aug 2026 · Tags: Cross-site request forgery (CSRF) - [Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute](https://agentprime.io/advisories/CVE-2026-69079.md) `CVE-2026-69079` · CVE record: misp cti-transmute · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Denial of service - [Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering](https://agentprime.io/advisories/CVE-2026-69078.md) `CVE-2026-69078` · CVE record: misp cti-transmute · CVSS 8.8 High · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF) - [Stored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names](https://agentprime.io/advisories/CVE-2026-9806.md) `CVE-2026-9806` · CVE record: misp cti-transmute · CVSS 6.3 Medium · Not analysed yet · Published 28 May 2026 · Tags: Cross-site scripting (XSS) ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .