CVE-2026-85239

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description An authenticated user with permissions to create or modify event templates can bypass validation of the template definition field. The EventTemplate::beforeValidate() method only performs semantic validation if the definition is an array; if a pre-encoded string containing malformed JSON or an unexpected data type is provided, it bypasses validateDefinition() and is stored in the database. Subsequently, the EventTemplate::afterFind() method uses JsonTool::decode() to retrieve the definition without handling decoding failures. This can trigger exceptions and cause HTTP 500 errors for all authenticated users accessing the event template index or other functionality relying on EventTemplate queries, resulting in a persistent denial of service. Additionally, JSON representing an unexpected type may lead to invalid data reaching downstream consumers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.