CVE-2026-95703 | MISP up to 2.5.46 Logo Upload __uploadLogo tmp_name information disclosure (12eaadc9e)

September 22, 2026 Yanac

A vulnerability has been found in MISP up to 2.5.46 and classified as problematic. This issue affects the function OrganisationsController::__uploadLogo of the component Logo Upload. The manipulation of the argument tmp_name leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-95703. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More