PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-54362 misp CVE debrief

CVE-2026-54362 is a vulnerability in the MISP (Malware Information Sharing Platform) event template builder. The issue arises from an incorrect visibility condition, which allowed authenticated non-site-admin users to view galaxies that should not have been visible to their organisation. This was due to a PHP comparison expression being used instead of a query condition in the custom access-control condition intended to restrict galaxies. As a result, enabled galaxies, including organisation-only custom galaxies belonging to other organisations, could be exposed in the template builder galaxy list. This could disclose metadata about private galaxy definitions to unauthorised users.

Vendor
misp
Product
Unknown
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-12
Original CVE updated
2026-06-15
Advisory published
2026-06-12
Advisory updated
2026-06-15

Who should care

Organisations using MISP for threat intelligence sharing should be aware of this vulnerability, as it could lead to unintended exposure of sensitive information about their galaxy definitions.

Technical summary

The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. It involves an incorrect visibility condition in the MISP event template builder, allowing authenticated non-site-admin users to view galaxies they shouldn't have access to.

Defensive priority

MEDIUM

Recommended defensive actions

  • Organisations using MISP should review their galaxy configurations and access controls.
  • Users with access to the MISP event template builder should be cautious when viewing galaxy lists.
  • Organisations should consider updating their MISP installation to a version that includes a fix for this vulnerability, if available.

Evidence notes

The CVE record and NVD detail pages provide official information about this vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-54362 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-54362

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-54362 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-54362

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://github.com/MISP/MISP/commit/8aa2bb6d1af6e8c57c8d8437cf203acb8bce7a53

    5a6e4751-2f3f-4070-9419-94fb35b644e8

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.