CVE-2026-63099 | Hive-Project TheHive up to 4.1.24 Attachment Download Endpoint improper authorization

July 17, 2026 Yanac

A vulnerability was found in Hive-Project TheHive up to 4.1.24. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Attachment Download Endpoint. The manipulation leads to improper authorization. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is listed as CVE-2026-63099. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More