Auth bypass in Misp
CVE-2026-54358
An incorrect authorization vulnerability in MISP allows an organization administrator to target site administrator accounts belonging to the same organization through the administrative email functionality. The affected code restricted org…
Vulnerability class: Broken Access Control
EPSS: 0.002 (13.9th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0