Threats Tagged 'cve-2026-77710'

A vulnerability in misp-stix allows a crafted STIX document to manipulate security-sensitive MISP attribute metadata during import. The STIX import logic relied on untrusted document metadata to select the parser, enabling attackers to spoof MISP-origin indicators. This flaw permits injection of unauthorized attribute properties such as distribution and sharing restrictions, potentially violating organizational policies or affecting downstream processing.

CVE-2026-77710 is a medium severity vulnerability in the misp-stix component of MISP that allows crafted STIX documents to manipulate security-sensitive attribute metadata during import. The vulnerability arises because the parser selection for STIX documents is based on untrusted metadata controlled by the document producer, enabling attackers to spoof MISP-origin indicators. This leads to improper input validation where attacker-supplied STIX bundles can inject unauthorized attribute properties such as distribution, sharing restrictions, and tags. This can cause information to be shared against organizational policies or influence downstream processing. The issue is addressed by introducing an explicit classification parameter and restricting accepted attribute fields via an allow-list.