CVE-2026-86347 | MISP up to 2.5.45 Upload uploadFile privileges management (ID 8e8885971)

A vulnerability labeled as problematic has been found in MISP up to 2.5.45. This affects the function TemplatesController::uploadFile of the component Upload Handler. The manipulation results in improper privilege management.

This vulnerability was named CVE-2026-86347. The attack may be performed from remote. There is no available exploit.

Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More