CVE-2026-54394Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields such as id, name, and uuid without ensuring that the resolved file remains inside the intended APP/files/img/orgs/ directory. An attacker able to influence an organisation field, for example the organisation name, could use path traversal sequences to cause MISP to return arbitrary readable .png or .svg files from outside the organisation logo directory. The issue is fixed by resolving candidate paths with realpath() and verifying that they remain under the expected base directory before serving the file.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/MISP/MISP/commit/b865deb036ca82dab272be260798f562034ba9ae

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-54394 MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-contro… https://www.cve.org/CVERecord?id=CVE-2026-54394 ----- Traducción: CVE-2026-54394 MIS… http://infoflow.cloud`
Post summary
The tweet reports a path traversal vulnerability (CVE‑2026‑54394) in MISP but provides no PoC, exploit code, patch info, or evidence of active exploitation.
0000034
79 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-54394 MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-contro… https://www.cve.org/CVERecord?id=CVE-2026-54394
Post summary
The statement discloses a path traversal flaw in MISP's OrganisationsController::getOrgLogo, detailing the vulnerability type and affected code, but does not mention any PoC, exploit, patch or evidence of active exploitation.
00000285
57.6K followersView on X

Explore more

Back to dashboard