CISA Malcolm vulnerabilities

Newest CVEs

• CVE-2026-107334

  Incorrect Authorization in Malcolm

  CISA · Malcolm

  Medium5.4
• CVE-2026-107335

  Improper Handling of Highly Compressed Data in Malcolm

  CISA · Malcolm

  Medium6.5
• CVE-2026-107337

  Cross-Site Request Forgery in Malcolm

  CISA · Malcolm

  High7.1
• CVE-2026-107361

  Authentication Bypass Using an Alternate Path or Channel in Malcolm

  CISA · Malcolm

  Medium4.2
• CVE-2026-107362

  Server-Side Request Forgery in Malcolm

  CISA · Malcolm

  High7.1
• CVE-2026-107333

  Incorrect Authorization in Malcolm

  CISA · Malcolm

  High8.1
• CVE-2026-107336

  Authentication Bypass by Spoofing in Malcolm

  CISA · Malcolm

  Medium6.5
• CVE-2026-90457

  The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file…

  CISA · Malcolm

  Medium6.9
• CVE-2026-90456

  Use of default credentials in Malcolm

  CISA · Malcolm

  Critical9.2
• CVE-2026-90455

  Dependency on vulnerable third-party component in Malcolm

  CISA · Malcolm

  Medium6.3