Cisa vulnerabilities

Products

• Malcolm 22
• Thorium 7
• Icsnpp-ethercat 3
• Industrial Control Systems Network Protocol Parsers (icsnpp) - Ethercat Plugin For Zeek 3

Newest

• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-107334 5.4 MediumOctober 8, 2026
• cisa malcolm Improper Handling of Highly Compressed Data in Malcolm CVE-2026-107335 6.5 MediumOctober 8, 2026
• cisa malcolm Cross-Site Request Forgery in Malcolm CVE-2026-107337 7.1 HighOctober 8, 2026
• cisa malcolm Authentication Bypass Using an Alternate Path or Channel in Malcolm CVE-2026-107361 4.2 MediumOctober 8, 2026
• cisa malcolm Server-Side Request Forgery in Malcolm CVE-2026-107362 7.1 HighOctober 8, 2026
• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-107333 8.1 HighOctober 8, 2026
• cisa malcolm Authentication Bypass by Spoofing in Malcolm CVE-2026-107336 6.5 MediumOctober 8, 2026
• cisa malcolm The administrative password is hashed using a comparatively weak, fast algorithm for the... CVE-2026-90457 6.9 MediumSeptember 11, 2026
• cisa malcolm Use of default credentials in Malcolm CVE-2026-90456 9.2 CriticalSeptember 11, 2026
• cisa malcolm Dependency on vulnerable third-party component in Malcolm CVE-2026-90455 6.3 MediumSeptember 11, 2026
• cisa malcolm Missing authorization in Malcolm CVE-2026-90454 5.3 MediumSeptember 11, 2026
• cisa malcolm Open Redirect in Malcolm CVE-2026-90453 5.1 MediumSeptember 11, 2026
• cisa malcolm Improper certificate validation in Malcolm CVE-2026-90452 6.0 MediumSeptember 11, 2026
• cisa malcolm Use of Default Credentials in Malcolm CVE-2026-90451 8.2 HighSeptember 11, 2026
• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-90450 5.3 MediumSeptember 11, 2026
• cisa malcolm Missing Authentication for Critical Function in Malcolm CVE-2026-90449 6.9 MediumSeptember 11, 2026
• cisa malcolm Missing Authorization in Malcolm CVE-2026-90448 7.1 HighSeptember 11, 2026
• cisa malcolm Authentication Bypass by Spoofing in Malcolm CVE-2026-90447 7.1 HighSeptember 11, 2026
• cisa malcolm Server-Side Request Forgery in Malcolm CVE-2026-90446 5.3 MediumSeptember 11, 2026
• cisa malcolm Path Traversal in Malcolm CVE-2026-90445 7.1 HighSeptember 11, 2026
• cisa malcolm OS Command Injection in Malcolm CVE-2026-90444 8.7 HighSeptember 11, 2026
• cisa malcolm Cross-site Scripting in Malcolm CVE-2026-90443 5.3 MediumSeptember 11, 2026
• cisa manage.get.gov CISA manage.get.gov insecure portfolio administrative privileges CVE-2026-43510 5.1 MediumMay 7, 2026
• cisa software acquisition guide, software acquisition guide tool +1 more Software Acquisition Guide Supplier Response Web Tool XSS CVE-2025-67634 4.6 MediumDecember 12, 2025
• cisa thorium CISA Thorium account verification email error handling CVE-2025-35436 6.9 MediumSeptember 17, 2025
• cisa thorium CISA Thorium download stream divide by zero CVE-2025-35435 5.3 MediumSeptember 17, 2025
• cisa thorium CISA Thorium does not validate TLS connections to Elasticsearch CVE-2025-35434 2.3 LowSeptember 17, 2025
• cisa thorium CISA Thorium does not properly invalidate previously used tokens CVE-2025-35433 2.3 LowSeptember 17, 2025
• cisa thorium CISA Thorium does not rate limit account verification email messages CVE-2025-35432 6.9 MediumSeptember 17, 2025
• cisa thorium CISA Thorium LDAP injection CVE-2025-35431 5.3 MediumSeptember 17, 2025
• cisa thorium CISA Thorium insecure downloaded file path validation CVE-2025-35430 5.3 MediumSeptember 17, 2025
• cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 more Ethercat Zeek Plugin Out-of-bounds Read CVE-2023-7242 8.2 HighMarch 1, 2024
• cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 more Ethercat Zeek Plugin Out-of-bounds Write CVE-2023-7243 9.8 CriticalMarch 1, 2024
• cisa icsnpp-ethercat, industrial control systems network protocol parsers (icsnpp) - ethercat plugin for zeek +1 more Ethercat Zeek Plugin Out-of-bounds Write CVE-2023-7244 9.8 CriticalMarch 1, 2024