CVE-2021-41326: Misp-Project Misp

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

In MISP before 2.4.148, app/Lib/Export/OpendataExport.php mishandles parameter data that is used in a shell_exec call.

Affected products

• Misp-Project Misp: before 2.4.148 (fixed in 2.4.148)

Published 2021-09-17. Last modified 2026-06-22.