CVE-2026-86418 | CIRCL MISP up to 2.5.45 Dashboard Organisation Picker createConditions User information disclosure (8ca4486af)

September 7, 2026 Yanac

A vulnerability described as problematic has been identified in CIRCL MISP up to 2.5.45. This affects the function Organisation::createConditions of the component Dashboard Organisation Picker. Executing a manipulation of the argument User can lead to information disclosure.

The identification of this vulnerability is CVE-2026-86418. The attack may be launched remotely. There is no exploit available.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More