{"id":"CVE-2026-112179","published":"2026-10-19T09:17:08.457","lastModified":"2026-10-19T19:17:25.923","description":"In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of non-exportable tags was applied only once after the iteration over all reports, rather than to each individual report.\n\nAs a result:\n\n- All reports except the last one in the set were pushed to the remote MISP instance with their non-exportable tags intact, effectively disclosing restricted tag information to the receiving instance.\n\n- When the last report in the set was withheld (empty), a null report was pushed, causing the remote instance to fail saving the event.\n\nThis issue affects any MISP instance configured to push events with multiple reports to a remote server via synchronization.\n\nAffected: <2.5.48.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-200"],"vendors":[],"products":[],"references":[{"url":"https://github.com/MISP/MISP/commit/0be4564a9","tags":[]}],"exploitRefs":[{"url":"https://github.com/MISP/MISP/commit/0be4564a9","tags":[]}],"hasPoc":true,"ai":null}