Lucene search
+L

2 matches found

Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•5 views

PT-2026-69849

Name of the Vulnerable Software and Affected Versions MISP cti-transmute affected versions not specified Description An incomplete authorization check exists in the 'conversion-history details' endpoint. When a history record references a deleted conversion, the system returns a null value during...

6.9CVSS5.7AI score0.00478EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•7 views

CVE-2026-72759: Missing Authorization

In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object...

6.9CVSS5.8AI score0.00478EPSS
SaveExploits0References2
Rows per page
Query Builder