{"vulnerability": "cve-2026-94383", "sightings": [{"uuid": "af55206f-7dad-47c8-b5c2-b42ad1aefbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ap64gxmp3hssp", "content": "CVE-2026-94383 - MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted File Extension\nCVE ID : CVE-2026-94383\n \n Published : Sept. 21, 2026, 1:17 p.m. | 21\u00a0minutes ago\n \n Description : The MISP blocklist workflow module accepted a user-supplied blocklist ...", "creation_timestamp": "2026-09-21T14:10:41.483275Z"}, {"uuid": "889332cf-35c8-4604-8ef3-c85376d7ae0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-94383", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-misp-1", "content": "", "creation_timestamp": "2026-09-22T16:45:10.105324Z"}, {"uuid": "ef9c8e79-7dfc-442d-9c3c-e8d0211973aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94383", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw5vrybu6f2u", "content": "CVE-2026-94383 - misp\nThe blocklist feature in MISP versions before 2.5.47 lets a site administrator name a file with any extension, which is then saved in the web server\u2019s export folder. If the web server is set to run\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#misp #CVE #infosec", "creation_timestamp": "2026-09-23T04:30:04.774476Z"}]}