CVE-2026-95683 MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...

CVE-2026-95683

CVE-2026-95683 affects the Overmind event view in MISP , where the enrichment logic fetched the most recent attached report using only the event ID as a lookup condition, without enforcing the report's own independent distribution/ACL constraints. Because MISP reports can carry a more restrictive...

PT-2026-96765

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...