Lucene search
+L

9 matches found

NVD
NVD
•added 2026/09/22 4:18 p.m.•32 views

CVE-2026-95805

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS0.00413EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 2:59 p.m.•17 views

EUVD-2026-84501

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/22 2:59 p.m.•17 views

CVE-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/22 2:59 p.m.•20 views

CVE-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 2:59 p.m.•30 views

CVE-2026-95805

CVE-2026-95805 affects the MISP ACLComponent , where a typo in the access control list caused the previewEventAttributes action to reference the permission string 'theming_enabled*' (with a trailing asterisk) instead of the correct 'theming_enabled'. Since the malformed key matches no valid permi...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/22 2:59 p.m.•7 views

CVE-2026-95805

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS5.9AI score0.00413EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/22 2:59 p.m.•46 views

CVE-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS0.00413EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•13 views

CVE-2026-95805: Improper Authorization

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

5.3CVSS6AI score0.00413EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•10 views

PT-2026-96785

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description A typo in the ACLComponent access control configuration causes the ACL rule for the previewEventAttributes action to reference the permission string theming enabled instead of theming enabled...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References3
Rows per page
Query Builder