CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

CVE-2026-95703 MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name

In MISP, the OrganisationsController::uploadLogo method processed a caller-supplied tmpname value with filesystem probes fileexists, MIME type detection, EXIF reading before verifying that the value corresponded to a genuine PHP file upload via isuploadedfile. An authenticated site-admin user cou...

CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95701

MISP contains a path traversal weakness in the __statisticsOrgs method of UsersController.php, where an attacker-influenced organization name is concatenated directly into a file-system path used by file_exists() to check for a logo image. An authenticated user with the ability to create or renam...

CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95701 MISP Path Traversal via Organization Name in Org-Statistics Logo Check

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

EUVD-2026-84496

In MISP, the statisticsOrgs method in UsersController.php used the organization name directly as a file-system path component when checking for the existence of an organization logo image. The original code called fileexists with a path constructed as APP . 'webroot' . DS . 'img' . DS . 'orgs' . ...

CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

CVE-2026-95698

MISP's OrgImgHelper::findOrgImage method builds a filesystem path by concatenating a user-supplied organization name (settable via event import) with a fixed image directory and extension, then calls file_exists() on the result. Because no validation is performed before path construction, an atta...

EUVD-2026-84495

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

CVE-2026-95698 MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

The findOrgImage method in MISP's OrgImgHelper constructs a filesystem path by concatenating a user-supplied organization identifier with a fixed image directory and a file extension, then calls fileexists on the resulting path. The organization name field is attacker-controllable through event...

CVE-2026-95697 MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2026-95697 MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2026-95697

MISP contains an authorization flaw in the Organisation model's captureOrg method . When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. An authenticated user with at leas...

EUVD-2026-84494

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2026-95697 MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata

MISP contains an authorization flaw in the Organisation model's captureOrg method. When the $force parameter is set to true, the method unconditionally overwrites organization metadata fields without verifying that the invoking user holds sufficient privileges. A user with a sharing group SG edit...

CVE-2026-95693 MISP Information Disclosure via Forged Upload Path

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...

EUVD-2026-84492

In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmpname field by invoking fileexists, mimecontenttype, and exifimagetype on the supplied path before verifying that the value was a genuine PHP upload via isuploadedfile. An authenticated user holding the permadd...