CVE-2021-41326

CriticalCVSS 9.8

Published: 17/09/2021(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.99%

78th percentile - higher than 78% of all known CVEs

In MISP before version 2.4.148, the file app/Lib/Export/OpendataExport.php mishandles the parameter data used in a shell_exec call.

Improper parameter handling may lead to unauthorized code execution on the server, posing a serious security risk.

It is recommended to update MISP to version 2.4.148 or later to mitigate this vulnerability.

Original NVD description (English source)

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.