CVE-2026-56422 - MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields
CVE ID :CVE-2026-56422 Published : June 22, 2026, 11:43 a.m. | 1 hour, 27 minutes ago Description :Multiple MISP core controllers and model capture paths accepted client-controlled request fields such as primary keys (id) and ownership/scope foreign keys (event_id, org_id, user_id,...