CVE-2025-66386: app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.

November 28, 2025 • Source: NVD (API)

Important cybersecurity news update

app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.