Auth bypass in Misp
CVE-2026-54357
An improper authorization vulnerability in MISP allowed an authenticated organization administrator to access or modify user settings belonging to site administrator accounts within the same organization. The affected access-control checks…
Vulnerability class: IDOR (Insecure Direct Object Reference)
EPSS: 0.003 (17.0th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0