CVE-2026-56446

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description A site administrator can configure an arbitrary filesystem path for the NDJSON error log used by JsonLogTool. Since log entries can contain attacker-controlled content, an authenticated attacker with site administrator privileges can direct log output to a PHP file within a web-accessible directory and inject PHP code. Accessing this file allows for remote code execution with the privileges of the web server process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.