CVE-2026-86451 MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects

Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::getreferencedata without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid direct...

CVE-2026-86441 MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not honor Security.hideorganisationindexfromusers. As a result, authenticated users without the permsharinggroup permission...

CVE-2026-86441 MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not honor Security.hideorganisationindexfromusers. As a result, authenticated users without the permsharinggroup permission...

EUVD-2026-72362

Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. The affected endpoint returned fields including: organisation ID; UUID; name. Whe...

EUVD-2026-72358

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view. The vulnerable handler queried CryptographicKey directly using the supplied key ID and selected sensitive fields such as: type keydata fingerprint but did no...

BASM (Broken Authentication & Session Management) Netty Dependency in Bitbucket Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-50010 was introduced in 9.0.1 and later of Bitbucket Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-86342

MISP versions ≤ 2.5.45 contain improper authorization checks in the freetext feed preview functionality. Correlation lookups queried attributes from events without applying the requesting user's ACL, exposing restricted event correlations and associated information to users lacking access. The sa...

Use Of A Broken Or Risky Cryptographic Algorithm

Spring Security is vulnerable to Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to AesBytesEncryptor using AES/CBC with a null all-zero initialization vector, which allows an attacker to exploit predictable encryption and potentially infer relationships between encrypt...

Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)

Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 - NRS have been addressed in version 3.0.5.3 Vulnerability Details CVEID:CVE-2026-17467 DESCRIPTION: IBM Cloud Pak for Data System Yosemite 1.0 could allow a remote attacker to obtain sensitive information due to the...

CVE-2026-86271

A missing authorization vulnerability in FluentCMS up to 0.0.5 affects the GetAccessible function in src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs, allowing a remote attacker with existing authenticated access to bypass permission checks. The CVSS 3.1 base score is 4.7 (MEDIUM) ...

PT-2026-86859

In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas content...

PT-2026-86771

Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. Several organisation-related widgets did not honor Security.hide organisation index from users. As a result, authenticated users without the perm sharing group...

PT-2026-86669

Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...

PT-2026-86765

Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view. The vulnerable handler queried CryptographicKey directly using the supplied key ID and selected sensitive fields such as: type key data fingerprint but did n...

EUVD-2026-72062

The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permission check authorised, allowing users with a subscriber-level account to change another user's email address, including an administrator's, and take over that...

PT-2026-86533

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description An authorization bypass exists in the UiBeta theme collection view at the presentation layer. The view template app/View/Themed/UiBeta/Collections/view.ctp performs a secondary query of member...

htb-writeups

HTB Write-ups Educational write-ups for retired Hack The...

CVE-2026-86190

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...

EUVD-2026-72011

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...

CVE-2026-86190 WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter

WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user records including password hashes, recovery tokens, and live session identifiers to unauthenticated callers when a hash parameter is provided. Attackers can use the disclosed session...