What is CVE-2026-56425?

CVE-2026-56425 is a high-severity vulnerability in Misp, classified under Session Fixation. CVSS score: 8.8/10. Published 2026-06-22.

How severe is CVE-2026-56425?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Misp

CVE-2026-56425

The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security guarantees provided by the protocol. The application…

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Misp — versions 0
Misp-project Misp

Weakness classification (CWE)

CWE-384 — Session Fixation

References

5a6e4751-2f3f-4070-9419-94fb35b644e8 (Patch, patch)

Frequently asked questions

What is CVE-2026-56425?: CVE-2026-56425 is a high-severity vulnerability in Misp, classified under Session Fixation. CVSS score: 8.8/10. Published 2026-06-22.
How severe is CVE-2026-56425?: High severity. CVSS v3 base score is 8.8 out of 10.