CVE-2026-85546

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description A cross-site request forgery (CSRF) issue exists in the sharing group quick-edit functionality. The addOrg, removeOrg, addServer, and removeServer actions utilize the initialiseSGQuickEdit() helper, where the HTTP method validation meant to restrict operations to POST requests was disabled. Consequently, these state-changing actions can be triggered via GET requests. An attacker could trick an authenticated user with sufficient privileges into clicking a malicious link, allowing the attacker to modify sharing group memberships by adding or removing organizations or servers. This could lead to unauthorized access to distributed information or the disruption of legitimate information sharing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.