Cisagov Malcolm vulnerabilities

• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-107334 5.4 MediumOctober 8, 2026
• cisa malcolm Improper Handling of Highly Compressed Data in Malcolm CVE-2026-107335 6.5 MediumOctober 8, 2026
• cisa malcolm Cross-Site Request Forgery in Malcolm CVE-2026-107337 7.1 HighOctober 8, 2026
• cisa malcolm Authentication Bypass Using an Alternate Path or Channel in Malcolm CVE-2026-107361 4.2 MediumOctober 8, 2026
• cisa malcolm Server-Side Request Forgery in Malcolm CVE-2026-107362 7.1 HighOctober 8, 2026
• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-107333 8.1 HighOctober 8, 2026
• cisa malcolm Authentication Bypass by Spoofing in Malcolm CVE-2026-107336 6.5 MediumOctober 8, 2026
• cisa malcolm The administrative password is hashed using a comparatively weak, fast algorithm for the... CVE-2026-90457 6.9 MediumSeptember 11, 2026
• cisa malcolm Use of default credentials in Malcolm CVE-2026-90456 9.2 CriticalSeptember 11, 2026
• cisa malcolm Dependency on vulnerable third-party component in Malcolm CVE-2026-90455 6.3 MediumSeptember 11, 2026
• cisa malcolm Missing authorization in Malcolm CVE-2026-90454 5.3 MediumSeptember 11, 2026
• cisa malcolm Open Redirect in Malcolm CVE-2026-90453 5.1 MediumSeptember 11, 2026
• cisa malcolm Improper certificate validation in Malcolm CVE-2026-90452 6.0 MediumSeptember 11, 2026
• cisa malcolm Use of Default Credentials in Malcolm CVE-2026-90451 8.2 HighSeptember 11, 2026
• cisa malcolm Incorrect Authorization in Malcolm CVE-2026-90450 5.3 MediumSeptember 11, 2026
• cisa malcolm Missing Authentication for Critical Function in Malcolm CVE-2026-90449 6.9 MediumSeptember 11, 2026
• cisa malcolm Missing Authorization in Malcolm CVE-2026-90448 7.1 HighSeptember 11, 2026
• cisa malcolm Authentication Bypass by Spoofing in Malcolm CVE-2026-90447 7.1 HighSeptember 11, 2026
• cisa malcolm Server-Side Request Forgery in Malcolm CVE-2026-90446 5.3 MediumSeptember 11, 2026
• cisa malcolm Path Traversal in Malcolm CVE-2026-90445 7.1 HighSeptember 11, 2026
• cisa malcolm OS Command Injection in Malcolm CVE-2026-90444 8.7 HighSeptember 11, 2026
• cisa malcolm Cross-site Scripting in Malcolm CVE-2026-90443 5.3 MediumSeptember 11, 2026
• cisagov malcolm Improper handling of highly compressed data (data amplification) in CISA Malcolm CVE-2026-19671 7.1 HighAugust 18, 2026
• cisagov malcolm Incorrect Authorization in CISA Malcolm CVE-2026-19670 5.3 MediumAugust 18, 2026
• cisagov malcolm Malcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBAC CVE-2026-63177 7.1 HighAugust 11, 2026
• cisagov malcolm Malcolm's Path Traversal in Archive Extraction Allows Arbitrary Directory Creation CVE-2026-63134 5.3 MediumAugust 11, 2026
• cisagov malcolm Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS) CVE-2026-63133 7.1 HighAugust 11, 2026
• cisagov malcolm Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component CVE-2026-55676 8.7 HighAugust 11, 2026