CVE-2026-92003

unknowncovered by 1 sourcefirst seen 2026-09-15

Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two API authentication failure branches wrote directly to the Log model: - API requests with no authentication key; - requests supplying an API key with an incorrect length Unlike other authentication failures, these paths bypassed _shouldLog(), so every request could create another durable auth_fail entry. Version affected: ≤2.5.45

⚡ Watch CVE-2026-92003

Get an email if CVE-2026-92003 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

unknownCVE-2026-92003: Affected versions of MISP do not consistently apply the existing authentication-failure loggin…nvd · 2026-09-15

External references

NVD record for CVE-2026-92003

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-92003 status](https://www.csirts.com/badge/CVE-2026-92003)](https://www.csirts.com/cve/CVE-2026-92003)