Auth bypass in Misp
CVE-2026-54397
A vulnerability in MISP’s non-REST event editing path allowed an authenticated user with event edit permissions to manipulate the submitted form data and set an event’s sharing_group_id to a sharing group they were not authorized to use. W…
Vulnerability class: Broken Access Control
EPSS: 0.002 (13.5th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0