Beveiligingsadvies

CVE-2026-92003

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 11:43:19

Laatst bijgewerkt 2026-09-15 12:32:06

Toegewezen door CIRCL

CVSS-score 6.9

Status PUBLISHED

Beschrijving

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model: - API requests with no authentication key; - requests supplying an API key with an incorrect length Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry. Version affected: ≤2.5.45

← Alle CVE's bekijken Bekijk op cve.org ↗