CVE-2026-10855

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description An authorization flaw exists in the Event Template Importer overwrite workflow. When importing an event template in overwrite mode, the application verifies if a matching template exists but fails to confirm that the importing user belongs to the organization owning that template. This allows an authenticated user to forcibly overwrite an event template owned by another organization, potentially altering its structure, attributes, or metadata. Site administrators are not affected by this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.