RCE in Misp
CVE-2026-56446
MISP allowed a site administrator to configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Because log entries can include attacker-controlled content, an authenticated attacker with site administrator privil…
Vulnerability class: RCE (Remote Code Execution)
Affected products
- Misp — versions 0