MISP access-control bypass exposing private galaxy metadata to non-admin org users (CVSS 5.3)

cve · CVE-2026-10854

Coverage timeline

first 2026-06-06 → last 2026-06-06

Briefs

1 distinct

Sources cited

2 hosts

Sections touched

—

Co-occurring entities

no co-occurrence

Story timeline

2026-06-06CTI Daily Brief — 2026-06-06

Source distribution

github.com1 (50%)
wid.cert-bund.de1 (50%)

External references

NVD · cve.org · CISA KEV

All cited sources (2)

github.comprimaryinlineGitHub Security Advisory, 2026-06-04https://github.com/advisories/GHSA-h7wj-m45x-884x
source profile · cited in 2026-06-06
wid.cert-bund.deinlineBSI CERT-Bund, 2026-06-04https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1800
source profile · cited in 2026-06-06

Items in briefs about MISP access-control bypass exposing private galaxy metadata to non-admin org users (CVSS 5.3)

No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.