CVE-2026-95685

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description An access control flaw exists in the EventReports functionality. The replaceSuggestionInReport endpoint, used to modify suggestion content within an event report, was incorrectly mapped to the wildcard permission (*) in the ACLComponent. This allows any authenticated user to invoke the endpoint and alter report suggestion data, even if they lack the required perm add permission. This improper authorization could lead to the unauthorized modification of event report content, potentially corrupting shared threat intelligence or injecting misleading information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.