Information disclosure in Misp
CVE-2026-54396
An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was populated using the attacker-controlled AuthKey.user_id value from…
Vulnerability class: Information Disclosure
EPSS: 0.002 (16.0th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0