Path Traversal in Misp
CVE-2026-54394
MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields such as id, name, and uuid without ensuring that the resolved…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.
Affected products
- Misp — versions 0