Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #11

MISP flaw lets authenticated users read server files

Original: CVE-2026-94401 MISP file-handling flaw: authenticated users can read server files or hit internal services via XML impor

A newly disclosed vulnerability, CVE-2026-94401, affects MISP, the open-source threat intelligence sharing platform. Authenticated users can exploit the file-handling flaw through XML import to read files on the server or reach internal services. The issue carries a CVSS score of 7.7, and a patch is reportedly still under review, prompting security teams to monitor for the fix.

Why now: A high-severity vulnerability in a widely used threat intelligence platform is newly disclosed with no patch yet released.

MISPCVE-2026-94401

Open on mastodon →

Evidence

• CVE-2026-94401 MISP file-handling flaw: authenticated users can read server files or hit internal services via XML import. CVSS 7.7. Patch under review, so watch for it. https://www. valtersit.com/cve/CVE-2026-944 01/ # CVE # infosec # MISP · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/1955235