CPE
The MISP Modules website component contains an authorization bypass vulnerability (CVE-2026-127016) that allows unauthenticated network attackers to manage external tools when an administrator password is configured.