CVE-2026-85221

MISP contains an improper TLS certificate validation vulnerability in CurlClient.

Misp

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification unless the calling code explicitly enabled it. As a result, HTTPS connections made through affected CurlClient instances could accept certificates that were not issued by a trusted certificate authority. An attacker…

3. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-85221