Skip to content
OpenAdvisories

Vendor

MISP

183 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-86283 Public exploit

    MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data

    MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applying the caller's access control list (ACL). The CollectionsController::view() action correctly resolved collect…