Auth bypass in Misp Cti-transmute
CVE-2026-72759
In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previ…
Vulnerability class: Broken Access Control
Affected products
- Misp Cti-transmute — versions 0