TheHive-Project TheHive

• CVE-2026-63099 Medium 6.5 TheHive 4.1.24 Broken Object Level Authorization via Attachment Download Endpoints 0.4%
• CVE-2026-63098 Medium 5.3 TheHive 4.1.24 Unauthenticated Information Disclosure via /api/status Endpoint 0.4%