What is CVE-2026-10864?

CVE-2026-10864 is a medium-severity vulnerability in Misp, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-06-04.

How severe is CVE-2026-10864?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Misp

CVE-2026-10864

A vulnerability in the MISP dashboard widgets allowed an authenticated user to manipulate the fields option and influence which fields were returned by the New Users and New Organisations widgets. In some cases, requesting a field set that…

Vulnerability class: Information Disclosure

EPSS: 0.002 (7.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Misp — versions 0
Misp-project Misp

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

5a6e4751-2f3f-4070-9419-94fb35b644e8 (Patch, patch)

Frequently asked questions

What is CVE-2026-10864?: CVE-2026-10864 is a medium-severity vulnerability in Misp, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-06-04.
How severe is CVE-2026-10864?: Medium severity. CVSS v3 base score is 4.3 out of 10.