CVE-2026-127016

{
  "etk_id": "ETK-2026-4261",
  "cve_id": "CVE-2026-127016",
  "display_id": "CVE-2026-127016",
  "ghsa_id": "GHSA-h3wj-j4hx-vx4c",
  "euvd_id": "EUVD-2026-124335",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Missing authorization in MISP Modules external tool management",
  "summary": "MISP Modules website deployments using ADMIN_PASSWORD are affected in the external tool management area. A remote unauthenticated user who can reach those endpoints may alter, remove, enable, or add external tool definitions, including related service settings.",
  "mitigation": "Restrict access to the MISP Modules website and its external tool management endpoints to trusted administrators, such as with network controls or an authenticated reverse proxy. Apply an upstream fix when one is published; no fixed version is recorded.",
  "vendor": "misp",
  "product": "misp-modules",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.1.4"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "misp-modules",
      "purl": null
    }
  ],
  "cwes": [
    862
  ],
  "cvss_score": 9.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:H/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 27.257936333333333,
  "t0_at": "2026-11-12T09:45:17.779000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-12T09:45:17.779000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-12T09:45:17.779000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-127016"
    }
  }
}