01 Record

CVE-2026-77710

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

MediumPUBLISHEDCNA: CIRCL

Base score6.9 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

02 Description

STIX2 Parser Confusion and Mass Assignment Allow Unauthorized MISP Attribute Metadata Injection in misp-stix library

Published

2026-08-21 08:54Z16 HR AGO

Last updated

2026-08-21 17:19Z8 HR AGO

Reserved

2026-08-21

Assigning CNA

CIRCL

Record state

PUBLISHED

Severity

Medium (CVSS 6.9)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

cdfdd0de885eef7dcc153d94a3d1fa9fc5588f8b9ec56107c8711484ddb2ee59

VendorProductVersionsPlatforms

MISPmisp-stix0 to 2026.7.8—

01 Record