Auth bypass in Misp
CVE-2026-56423
MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affected deleteSelection handlers authorized deletion using broad role-level permissions instead of validating authorizat…
Vulnerability class: Broken Access Control
Affected products
- Misp — versions 0