CVE-2026-10611

An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and Security.require_otp=true, users authenticated through an authentication plugin, such as LDAP, may have their authenticated session established during the application beforeFilter phase before the normal login flow enforces the OTP challenge. As a result, an attacker with valid primary authentication credentials could bypass the required OTP step by authenticating through the plugin-backed login flow and then directly accessing another application URL instead of completing the OTP verification page. This allows access to the application as the affected user without providing a valid TOTP, HOTP, or email OTP code. The issue affects configurations where plugin-based authentication is enabled and OTP is expected to be mandatory. The fix ensures that OTP requirements are checked immediately after plugin authentication and before the user session is established, redirecting users to the appropriate OTP challenge when required.

• CWE-287

• https://github.com/MISP/MISP/commit/39b3cb15aac4318afdd2ab63b96c2eac12b271fePatch

Published

Jun 2, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10606A vulnerability was determined in DedeCMS 5.7.88. The affect…7.3
• CVE-2026-10607A vulnerability was identified in DedeCMS 5.7.88. The impact…7.3
• CVE-2026-10608A security flaw has been discovered in DedeCMS 5.7.88. This …7.3
• CVE-2026-10609A missing authorization flaw was found in the OpenShift Clus…6.8
• CVE-2026-1061A vulnerability was detected in xiweicheng TMS up to 2.28.0.…9.8
• CVE-2026-10610Local privilege escalation potentially allowed an attacker t…8.5
• CVE-2026-10616A weakness has been identified in nextlevelbuilder GoClaw up…4.3
• CVE-2026-10617A security vulnerability has been detected in nextlevelbuild…7.3
• CVE-2026-10619A vulnerability was detected in sayan365 student-management-…7.3
• CVE-2026-1062A flaw has been found in xiweicheng TMS up to 2.28.0. This a…9.8
• CVE-2026-10620A flaw has been found in code-projects Student Admission Sys…7.3
• CVE-2026-10621Path traversal in restore handler in Collibra Agent, allows …7.5