PT-2026-56450 · Misp · Misp

Berk Polat + 1 · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-60124

Mitre

CVSS v4.0

5.3

Média

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

An authorization bypass in MISP’s EventsController::importModule() allowed authenticated users or read-only API keys with event view access to persist data to events they were not allowed to modify. When an import module returned results in the misp standard format, the write path did not verify event modification rights before saving the module output. This could allow a view-only user to inject or alter event data, impacting the integrity of MISP event content. The issue was fixed by enforcing the same modification-rights check used by related module result handling paths before processing misp standard imports.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-60124

Produtos afetados

Misp

Referências · 2

• https://github.com/MISP/MISP/commit/d0725fc34fda256cc57e5a8f0543cd541033e008 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-60124 · Nota de Segurança