CVE-2026-44379
Medium
Description
MISP is an open source threat intelligence and sharing platform. Prior to 2.5.37, MISP Collections did not enforce RFC 4122 UUID validation on the uuid field. As a result, a user able to create or modify Collection records could submit malformed UUID values, potentially causing integrity issues or unexpected behaviour in code paths that assume Collection UUIDs are valid identifiers. This vulnerability is fixed in 2.5.37.
SeverityMedium
CVSS5.3
Exploit probability—
ProductMisp
PublishedMay 13, 2026
First seenMay 13, 2026
Weakness typeCWE-20Improper input validation
How to fix
Update
- misp-project misp2.5.37 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| misp-project misp | v < 2.5.37 | 2.5.37 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.