CVE-2026-92003

MISP (versions ≤2.5.45) contains an unthrottled authentication-failure logging flaw. Two API authentication-failure branches—requests with no authentication key and requests with an API key of incorrect length —wrote directly to the Log model, bypassing the _shouldLog() throttle used by other fai...