CVE-2026-73162

Name of the Vulnerable Software and Affected Versions MISP cti-transmute (affected versions not specified)

Description Several state-changing account operations are exposed as GET requests, making them susceptible to cross-site request forgery (CSRF). CSRF is a flaw where a third-party site induces a victim's browser to send authenticated requests automatically to a target server. The affected API endpoints are '/account/follow', '/account/delete notification', '/account/mark notification read', and '/account/mark all read'.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.