CVE-2026-72760— cti-transmute Following List Exposes User Email Addresses to Authenticated Users
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-72760
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
cti-transmute Following List Exposes User Email Addresses to Authenticated Users
Source: CVE Program / CVE List V5
Vulnerability Description
Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint. When an authenticated user follows another account, get_following() includes the followed user's email field in the API response alongside their name, user ID, and follow date. Because the email address is not required for the functionality and other related user lists omit it, an authenticated attacker could systematically follow users and collect their email addresses. The fix removes user.email from the returned object.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MISP | cti-transmute | 0 ~ 1.4.0 | - |
II. Public POCs for CVE-2026-72760
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-72760
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-72760 (1)
Same Patch Batch · MISP · 2026-08-10 · 3 CVEs total
| CVE-2026-72759 | 6.9 MEDIUM | cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure A |
| CVE-2026-72751 | 5.1 MEDIUM | Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Cont |
IV. Related Vulnerabilities
Same product: cti-transmute
- CVE-2026-72759
cti-transmute Conversion History Authorization Bypass Leads - CVE-2026-72751
Stored Cross-Site Scripting in CTI-Transmute Conversion Grap - CVE-2026-71502
Unauthenticated Stored Vue Template Injection Leads to Cross - CVE-2026-69082
Cross-Site Request Forgery in the Administrative User Deleti - CVE-2026-69079
Unauthenticated Denial of Service via Unbounded Activity-Tim
Same vendor: MISP
- CVE-2026-72759
cti-transmute Conversion History Authorization Bypass Leads - CVE-2026-72751
Stored Cross-Site Scripting in CTI-Transmute Conversion Grap - CVE-2026-71502
Unauthenticated Stored Vue Template Injection Leads to Cross - CVE-2026-69082
Cross-Site Request Forgery in the Administrative User Deleti - CVE-2026-69079
Unauthenticated Denial of Service via Unbounded Activity-Tim
Same weakness: CWE-200
- CVE-2026-72726
Discourse: Unauthorized eavesdropping on private AI bot conv - CVE-2026-61899
Apache Tapestry: Possible classpath file download through UR - CVE-2026-19357
MingSoft MCMS ms-mdiy get information disclosure - CVE-2026-19356
MingSoft MCMS ms-mdiy list information disclosure - CVE-2026-19245
HKUDS nanobot Login-shell Environment shell.py ExecTool._pre
V. Comments for CVE-2026-72760
No comments yet