Information disclosure in Misp Cti-transmute
CVE-2026-72760
Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, get_following() includes the followed user's email field in the API re…
Vulnerability class: Information Disclosure
Affected products
- Misp Cti-transmute — versions 0