CSRF in Misp Cti-transmute
CVE-2026-69082
CTI-Transmute contained a cross-site request forgery vulnerability in the administrative user deletion functionality. The /account/delete/<id> endpoint accepted HTTP GET requests for an operation that modified application state. An unauth…
Vulnerability class: CSRF (Cross-Site Request Forgery)
Affected products
- Misp Cti-transmute — versions 0