CVE-2026-95683

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description The Overmind event view enriches events with the most recent attached report for preview. The enrichment logic retrieves reports using only the event ID, failing to apply the report's specific distribution or Access Control List (ACL) constraints. Since reports can have more restrictive distribution settings than their parent events, an authenticated user with read access to an event can view reports that explicitly exclude them. Furthermore, the query fails to filter out soft-deleted reports, enabling the retrieval of reports that were administratively removed, leading to unauthorized disclosure of threat-intelligence content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.