CVE-2026-95693 | MISP up to 2.5.46 Upload Picture uploadPicture tmp_name information disclosure

September 22, 2026 Yanac

A vulnerability was found in MISP up to 2.5.46. It has been classified as problematic. This vulnerability affects the function EventReport::uploadPicture of the component Upload Picture. The manipulation of the argument tmp_name leads to information disclosure.

This vulnerability is referenced as CVE-2026-95693. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More