13225 matches found
CVE-2026-10860
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
CVE-2026-10860 MISP CRUDComponent delete validation bypass via operator precedence error
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
EUVD-2026-34264
A logic error in the MISP CRUD component delete handler allowed validation failures to be bypassed when requests used the HTTP DELETE method. Due to missing parentheses in the delete condition, the expression was evaluated as $validationError === null && POST || DELETE, meaning a DELETE request...
PT-2026-46323
Unauthenticated Local File Inclusion in Imba = 1.5.0 versions...
PT-2026-46326
Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...
PT-2026-46343
Unauthenticated PHP Object Injection in Plumbing = 1.6 versions...
PT-2026-46335
Unauthenticated Local File Inclusion in CopyPress = 1.4.5 versions...
PT-2026-46381
Unauthenticated Local File Inclusion in Truemag = 4.3.14.2 versions...
PT-2026-46340
Unauthenticated Local File Inclusion in Especio = 1.0 versions...
PT-2026-46376
Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...
PT-2026-46375
Unauthenticated Local File Inclusion in Resurs = 1.3 versions...
PT-2026-46365
Unauthenticated Local File Inclusion in Snowy = 1.13 versions...
PT-2026-46346
Unauthenticated Local File Inclusion in Wanium = 1.9.8 versions...
PT-2026-46370
Unauthenticated Local File Inclusion in Gunslinger = 1.7 versions...
PT-2026-46333
Unauthenticated Local File Inclusion in Iona = 1.0.8 versions...
PT-2026-46341
Unauthenticated Local File Inclusion in Food Drop = 1.3 versions...
PT-2026-46322
Unauthenticated Local File Inclusion in Modernee = 1.6.0 versions...
PT-2026-46325
Unauthenticated PHP Object Injection in Hot Coffee = 1.7 versions...