Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Because log entries can include attacker-controlled content, an authenticated attacker with site administrator privileges could direct log output to a PHP file in a web-accessible directory and inject PHP code through logged data. Accessing the resulting file could lead to remote code execution with the privileges of the web server process. The fix restricts log destinations to existing directories beneath APP/tmp/logs or /var/log, requires absolute paths, rejects stream wrappers and traversal-related input, and limits filenames to .log or .ndjson extensions while disallowing executable extension segments.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-22 | 3 | Disclosure1General2 |
| 2026-06-27 | 1 | General1 |
【3軸解説】「MISP projectのMalware Information Sharing Platform (MISP)におけるコードインジェクションの脆弱性（CVE-2026-56446）」を、背景 / 目的 / 効果 の 3 軸で読み解きます。 背景/目的/効果の3軸で読み解きました。 #セキ… ▶ 無料ツール WR-Analysis: https://www.intect-i.jp/tools/wr-analysis/?utm_source=sns&utm_medium=social&utm_campaign=wr_analysis
Post summary
The post offers a conceptual 3‑axis overview of the MISP code injection vulnerability CVE‑2026‑56446 without providing PoC, exploit, or mitigation details.
CVE-2026-56446 Arbitrary Filesystem Path Configuration Remote Code Execution in MISP JsonLogTool https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56446
Post summary
CVE-2026-56446 is a disclosed RCE vulnerability in the MISP JsonLogTool caused by arbitrary filesystem path configuration, with no PoC, exploit code, or patch details referenced.
🚨*CVE* CVE-2026-56446 MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Because log entries can include attacker-con… https://www.cve.org/CVERecord?id=CVE-2026-56446 ----- Traducción: CVE-2026-56446 MIS… http://infoflow.cloud`
Post summary
CVE-2026-56446 allows a site administrator to specify an arbitrary filesystem path for the NDJSON error log used by JsonLogTool, potentially enabling log injection or other downstream risks.
CVE-2026-56446 MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Because log entries can include attacker-con… https://www.cve.org/CVERecord?id=CVE-2026-56446
Post summary
The post provides a brief technical description of CVE-2026-56446, noting that MISP's JsonLogTool allows arbitrary filesystem path configuration, but offers no evidence of exploitation, mitigation, or proof of concept.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | misp-project | misp | - | - | - |