Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/10 2:17 p.m.•11 views

CVE-2026-88915

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharinggroupid. The instantiation path passed that value into event creation without verifying that the user...

7.1CVSS0.00351EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/10 1:04 p.m.•29 views

CVE-2026-88915

MISP ≤2.5.45 is affected by an authorization bypass in the event template instantiation path. When a template uses distribution = 4 , the template's sharing_group_id was passed directly into event creation without verifying that the acting user is permitted to use that sharing group via SharingGr...

7.1CVSS5.7AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 1:04 p.m.•47 views

CVE-2026-88915 MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharinggroupid. The instantiation path passed that value into event creation without verifying that the user...

7.1CVSS0.00351EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/10 1:04 p.m.•14 views

EUVD-2026-75409

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharinggroupid. The instantiation path passed that value into event creation without verifying that the user...

7.1CVSS5.7AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/10 1:04 p.m.•27 views

CVE-2026-88915 MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharinggroupid. The instantiation path passed that value into event creation without verifying that the user...

7.1CVSS5.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•3 views

CVE-2026-88915: Missing Authorization

Affected versions of MISP do not consistently enforce the acting user's authorization when instantiating event templates. For templates using distribution = 4, the template can specify a sharinggroupid. The instantiation path passed that value into event creation without verifying that the user...

7.1CVSS5.7AI score0.00351EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2005/11/03 12:00 a.m.•25 views

File Alteration Monitor daemon (famd) Service Detection

The File Alteration Monitor daemon is running on this port. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
SaveExploits0
Rows per page
Query Builder