Zurück zur CVE-Übersicht
CVE-2026-92003
NONERisk Signal Score5/100 — NIEDRIG
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.4%
Exploit-Wahrscheinlichkeit (30 Tage)
Beschreibung
Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model: - API requests with no authentication key; - requests supplying an API key with an incorrect length Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry. Version affected: ≤2.5.45