Privilege Escalation in MISP Core Controllers by Multiple Request Fields

CVE-2026-56422

What is CVE-2026-56422?

The vulnerability involves multiple core controllers of the Monitoring Information Sharing Platform (MISP) that improperly process client-supplied identifiers such as primary keys and foreign keys. This can lead to potential exploitation by authenticated users, allowing them to manipulate data associated with different objects than intended. If an attacker successfully crafts requests using this vulnerability, they could overwrite existing objects, perform unauthorized transfers of ownership, or inject malicious content. To mitigate these risks, patches have been applied to enhance the validation of identifiers and enforce strict checks on ownership fields, ensuring only authorized edits are permitted.

References