PT-2026-38308 · Unknown · Misp-Modules

Published 2026-05-06 · Updated 2026-05-13 · CVE-2026-44363

Positive Technologies (AI Summary)

CVSS v4.0

5.8

Medium

Base vector

AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions MISP Modules versions prior to 3.0.7

Description Unsafe remote resource fetching exists in expansion modules. The html to markdown module accepts arbitrary HTTP(S) URLs without sufficient validation, enabling Server-Side Request Forgery (SSRF)—a technique where an attacker forces a server to make requests to an unintended location—against loopback, private, or link-local network resources. Furthermore, the qrcode module disables TLS certificate verification when retrieving remote images, which exposes requests to man-in-the-middle interception or response tampering.

Recommendations Update to version 3.0.7.

Fix

SSRF

Improper Certificate Validation

Weakness Enumeration

CWE-918

CWE-295

Related Identifiers

CVE-2026-44363

GHSA-FHQ3-2GF3-8F3J

Affected Products

Misp-Modules

References · 7

• https://osv.dev/vulnerability/GHSA-fhq3-2gf3-8f3j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44363 · Security Note
• https://github.com/MISP/misp-modules/security/advisories/GHSA-fhq3-2gf3-8f3j · Note
• https://github.com/MISP/misp-modules/commit/01a522f2772fc31eeed379ccf23750c8a3d401db · Note
• https://github.com/MISP/misp-modules · Note
• https://twitter.com/CVEnew/status/2054709248127619090 · Twitter Post
• https://t.me/CVEtracker/53700 · Telegram Post