CVE-2026-104912

{
  "etk_id": "ETK-2026-361",
  "cve_id": "CVE-2026-104912",
  "display_id": "CVE-2026-104912",
  "ghsa_id": "GHSA-w4mw-2637-h8xp",
  "euvd_id": "EUVD-2026-91751",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authorization bypass in MISP correlation searches",
  "summary": "MISP versions before 2.5.48 can apply outdated access information when resolving correlated data during attribute searches. An authenticated user may view attributes and event metadata from events they can no longer access when relevant correlations exist and an event was later restricted.",
  "mitigation": "Upgrade MISP to version 2.5.48 or later. Until upgraded, limit attribute-search access for users who do not require it and review access to recently restricted events.",
  "vendor": "MISP",
  "product": "MISP",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 2.5.48"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "2.5.48"
      ],
      "package_name": "MISP",
      "purl": null
    }
  ],
  "cwes": [
    862
  ],
  "cvss_score": 7.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0021,
  "epss_percentile": 0.1026,
  "epss_asof": "2026-10-21",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 33.6459374,
  "t0_at": "2026-10-02T16:04:50.580000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-02T16:04:50.580000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T16:04:50.580000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-104912"
    }
  }
}