CVE-2026-95701 | MISP up to 2.5.46 Logo UsersController.php __statisticsOrgs k path traversal (a2f7cba6e)

September 22, 2026 Yanac

A vulnerability was found in MISP up to 2.5.46. It has been declared as problematic. This issue affects the function __statisticsOrgs of the file UsersController.php of the component Logo Handler. The manipulation of the argument k results in path traversal.

This vulnerability is identified as CVE-2026-95701. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More