CVE-2026-86283

MISP 's UiBeta theme collection view template (app/View/Themed/UiBeta/Collections/view.ctp) contained an authorization bypass : while the controller correctly enforced per-user event ACL via Event::fetchSimpleEvents(), the view independently re-queried the same event UUIDs using only an Event.uui...