Case Sensitivity Vulnerability in MISP Guard by MISP

CVE-2026-116469

What is CVE-2026-116469?

MISP Guard, a security filter for distributing MISP feeds, exhibits a case sensitivity flaw that affects the enforcement of security policies. Specifically, certain functions responsible for validating taxonomy tags, attribute categories, and sharing group UUIDs do not account for variations in letter casing. This flaw enables attackers with normal event-creation privileges to craft events that use altered cases in taxonomy or category strings, thus bypassing security measures intended to limit the dissemination of sensitive information. As a consequence, unauthorized threat intelligence data may be disclosed, undermining the confidentiality protections that MISP Guard is meant to provide.

References