CVE-2026-60124

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description An authorization bypass exists in the importModule() function within the EventsController. This flaw allows authenticated users or read-only API keys with event view access to persist data to events they are not permitted to modify. The issue occurs when an import module returns results in the misp standard format, as the write path fails to verify event modification rights before saving the output. This allows a view-only user to inject or alter event data, compromising the integrity of the event content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.