Proud to announce two new vulnerabilities were published today from my independent research! 🎉 Affecting MISP version 2.5.37 and prior. CVE-2026-9136 👉 https://github.com/advisories/GHSA-hfjr-4239-84fm CVE-2026-9137 👉 https://github.com/advisories/GHSA-gfvj-j222-m85v - Wrote two security patches to resolve the vulnerabilities. - Maintainer reviewed, approved, and merged the fixes. - Fixes are included in the release of MISP 2.5.38. Grateful for the opportunity to collaborate with the MISP Team! #TogetherWeHitHarder
Post summary
The author announces the discovery of CVE-2026-9136 and CVE-2026-9137 in MISP 2.5.37 and earlier, provides advisory links, and confirms that patches have been written and incorporated into MISP 2.5.38, making patch release the central focus.