CVE-2026-54396Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdown was populated using the attacker-controlled AuthKey.user_id value from the submitted request data. An authenticated user with permission to edit an AuthKey could submit arbitrary user IDs and observe the returned dropdown data, allowing enumeration of user email addresses. The issue is fixed by deriving the dropdown user from the persisted AuthKey owner instead of the request body.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/MISP/MISP/commit/42737f4e88df801486334690913dd344e447fac3

Weakness type (CWE)

CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-54396 An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdow… https://www.cve.org/CVERecord?id=CVE-2026-54396 ----- Traducción: CVE-2026-54396 Exi… http://infoflow.cloud`
Post summary
The post announces CVE-2026-54396, describing an information disclosure flaw in MISP’s AuthKey edit feature, and provides a link to the official CVE record for further details.
0000038
79 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-54396 An information disclosure vulnerability exists in the MISP AuthKey edit functionality. When a validation error occurs during an AuthKey edit request, the user dropdow… https://www.cve.org/CVERecord?id=CVE-2026-54396
Post summary
A new information disclosure vulnerability (CVE-2026-54396) has been identified in MISP’s AuthKey edit feature, occurring when a validation error triggers a user dropdown misuse.
00000222
57.6K followersView on X

Explore more

Back to dashboard