CVE-2026-72760

Name of the Vulnerable Software and Affected Versions MISP cti-transmute (affected versions not specified)

Description An issue exists where the account following-list endpoint discloses the email addresses of users. When an authenticated user follows another account, the get following() function includes the user.email field in the API response, along with the name, user ID, and follow date. An authenticated attacker could systematically follow users to collect these email addresses, as this information is not required for the functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.