Auth bypass in Misp
CVE-2026-54362
An incorrect visibility condition in the MISP event template builder allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. The custom access-control condition intended to restr…
Vulnerability class: Broken Access Control
EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0