CVE-2026-85538 | MISP up to 2.5.45 Attribute Deletion deleteAttribute privileges management (d0a6f963f)

A vulnerability classified as critical has been found in MISP up to 2.5.45. This affects the function MispAttribute::deleteAttribute of the component Attribute Deletion. This manipulation causes improper privilege management.

The identification of this vulnerability is CVE-2026-85538. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.VulDB Recent EntriesRead More