CVE-2026-56425 - MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection
CVE ID :CVE-2026-56425 Published : June 22, 2026, 12:25 p.m. | 2 hours, 45 minutes ago Description :The Azure Active Directory (AAD) authentication implementation contained multiple weaknesses in its OAuth 2.0 authorization flow that could allow attackers to bypass important security...