What is CVE-2026-72759?
CVE-2026-72759 affects MISP cti-transmute, where the conversion-history details endpoint performs an incomplete authorization check. Specifically, when a history record references a deleted conversion, it returns None and the previous logic only denied access when the conversion object existed. Users should apply the necessary patch to mitigate unauthorized access.
Azərbaycanca: CVE-2026-72759 MISP cti-transmute alətində tapılıb, burada `conversion-history details` endpoint-də natamam avtorizasiya yoxlaması həyata keçirilir. Əsasən silinmiş konvertasiya qeydləri ilə bağlı `None` cavabı qaytarıldıqda, giriş icazəsi düzgün məhdudlaşdırılmır. İstifadəçilər müvafiq yamağı tətbiq etməlidir.
Related CVEs
link basis: same weakness class CWE-862
FAQ2
Which functionality of the MISP cti-transmute tool is affected by CVE-2026-72759?
This vulnerability is found in the conversion-history details endpoint.
How does the vulnerability manifest in the authorization logic?
The conversion-history details endpoint performs an incomplete authorization check. When referencing deleted conversion records, it returns None, and the previous logic only denied access when the conversion object existed.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.