CVE-2026-86441

MISP (a threat intelligence platform) versions ≤ 2.5.45 contain inconsistent authorization checks in dashboard organisation widgets. Several widgets failed to honor the Security.hide_organisation_index_from_users setting, allowing authenticated users without the perm_sharing_group permission to e...