CVE-2026-91851

Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission flag. DashboardsController::listTemplates() allowed a template when either:  - its restrict_to_permission_flag matched one of the current user’s permission flags, or  - restrict_to_permission_flag equaled integer 0 However, restrict_to_permission_flag is a varchar. MySQL therefore performed numeric coercion when comparing the column against integer 0. Strings such as perm_site_admin convert numerically to zero, making expressions such as perm_site_admin = 0 evaluate true and causing the “unrestricted” branch to match permission-restricted templates as well. Version affected: ≤2.5.45

• CWE-697
• CWE-863

• https://github.com/MISP/MISP/commit/245b8d63a

Published

Sep 15, 2026

Last Modified

Sep 16, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-91842A vulnerability has been found in OpenBankProject OBP-API up…4.1
• CVE-2026-91843A stack overflow during the unauthenticated login process ma…9.8
• CVE-2026-91846Affected versions of MISP allow a collection element to be c…7.1
• CVE-2026-91848A vulnerability was identified in WuzhiCMS up to 4.1.0. Affe…7.3
• CVE-2026-91849A security flaw has been discovered in WuzhiCMS up to 4.1.0.…6.3
• CVE-2026-9185The 6Storage Rentals plugin for WordPress is vulnerable to A…7.5
• CVE-2026-91853A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.20…7.4
• CVE-2026-91854A vulnerability was identified in code-projects Record Manag…4.3
• CVE-2026-91855A security flaw has been discovered in Open5GS up to 2.7.7. …5.3
• CVE-2026-91857Affected versions of MISP expose several state-changing cont…5.3
• CVE-2026-91859Affected versions of MISP can record incorrect access-log da…5.3
• CVE-2026-9186IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenti…6.5