CVE-2026-103659

MISP versions prior to 2.5.48 are vulnerable to an authorization bypass within the event flattening feature. When a user requests an event with the flatten option enabled, the application removes Object containment from the query and returns object attributes as top-level attributes without re-ap...

CVE-2026-103659 MISP: Object Distribution ACL Bypass via Event Flattening Exposes Organisation-Only Attributes

MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment from the query and returns object attributes as top-level event attributes. In doing so, the object-level distributi...

EUVD-2026-84407

In MISP, the Overmind event view enriches an event with its most recent attached report for preview purposes. The enrichment logic fetched the report using only the event ID as the lookup condition, without applying the report's own distribution/ACL constraints. Because MISP reports carry an...