CVE-2026-93295

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as the argv of the CakePHP console process. CakePHP's ShellDispatcher::parsePaths scans the entire argv for path switches -app,...

CVE-2026-93295

CVE-2026-93295 affects MISP (Malware Information Sharing Platform) in its background job dispatch mechanism. The root cause is that CakePHP's ShellDispatcher::_parsePaths() scans the entire argv of the console process for path switches (-app, --working, --root, etc.) and treats the following elem...

EUVD-2026-82314

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as the argv of the CakePHP console process. CakePHP's ShellDispatcher::parsePaths scans the entire argv for path switches -app,...