CVE-2026-112180

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.48

Description A data integrity flaw exists in the event deletion logic. When an authenticated user with sufficient privileges deletes an event, certain associated records are not removed from the database, resulting in orphaned entries. Affected record types include event report tags, event graph entries, proposal (shadow attribute) correlations, fuzzy ssdeep correlation chunks, and attachment scan results. These orphaned records may contain sensitive threat intelligence data, such as correlation mappings, scan results, and report metadata. This persistence creates a risk of unintended data retention and potential information exposure if the records are accessed through other application queries or administrative interfaces. Additionally, the accumulation of these records may lead to storage bloat.

Recommendations Update to version 2.5.48 or later.