SSRF in Misp Cti-transmute
CVE-2026-73160
Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints. The URL validation routine checked whether a supplied hostname was itself an IP literal and rejected private, lo…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Misp Cti-transmute — versions 0