CVE-2026-73160

Name of the Vulnerable Software and Affected Versions cti-transmute (affected versions not specified)

Description An SSRF (Server-Side Request Forgery) issue exists where the server can be coerced into making requests to internal network addresses. The URL validation routine failed to resolve domain names before checking for private, loopback, link-local, or reserved IP addresses, allowing attackers to use hostnames that resolve to internal targets. This allows anonymous callers to trigger requests to internal systems and read the responses via the '/fetch misp event' and '/misp search events' endpoints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.