{"id":"CVE-2026-92002","title":"Affected versions of MISP use Redis to throttle repeated authentication-failure log entries","summary":"Affected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentication activity.\n\n\nHowever, User->setupRedis() returns fals…","severity":"medium","cvss":5.1,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","cwe":["CWE-778"],"vendor":"MISP","product":"MISP","affected":["MISP < 2.5.46"],"published":"2026-09-15","updated":"2026-09-16","sourceUpdated":"2026-09-16T13:42:49.027","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92002","references":[{"url":"https://github.com/MISP/MISP/commit/a39b25d2f","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-15T12:00:12.607042Z"},"cvssSource":"cna","ingestedAt":"2026-09-15T11:36:07.421Z","epss":0.00386,"epssPercentile":0.32391,"slug":"CVE-2026-92002","body":"## Overview\n\nAffected versions of MISP use Redis to throttle repeated authentication-failure log entries. The intent is to avoid excessive duplicate logs while still recording failed authentication activity.\n\n\nHowever, User->setupRedis() returns false when Redis cannot be reached. The vulnerable _shouldLog() logic only returned true when a Redis instance existed and no throttle key was present. Therefore, when Redis was unavailable, the function did not allow the log write at all, effectively silencing authentication-failure logging for the duration of the outage.\n\nVersion affected: ≤2.5.45\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}