CVE-2026-106512 | MISP SachertortePHP Download CakeResponse.php CakeResponse::download cross site scripting

A vulnerability labeled as problematic has been found in MISP SachertortePHP. Affected by this issue is the function CakeResponse::download of the file lib/Cake/Network/CakeResponse.php of the component Download. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-106512. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More