What’s Vulnerable › Products

CISA Malcolm vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 22 published in the last 12 months.

Check whether your CISA Malcolm version is affected

Latest CISA Malcolm vulnerabilities

• CVE-2026-107362 — Server-Side Request Forgery in Malcolm (CVSS 7.1)
• CVE-2026-107361 — Authentication Bypass Using an Alternate Path or Channel in Malcolm (CVSS 4.2)
• CVE-2026-107337 — Cross-Site Request Forgery in Malcolm (CVSS 7.1)
• CVE-2026-107336 — Authentication Bypass by Spoofing in Malcolm (CVSS 6.5)
• CVE-2026-107335 — Improper Handling of Highly Compressed Data in Malcolm (CVSS 6.5)
• CVE-2026-107334 — Incorrect Authorization in Malcolm (CVSS 5.4)
• CVE-2026-107333 — Incorrect Authorization in Malcolm (CVSS 8.1)
• CVE-2026-90457 — (CVSS 6.2)
• CVE-2026-90456 — Use of default credentials in Malcolm (CVSS 8.1)
• CVE-2026-90455 — Dependency on vulnerable third-party component in Malcolm (CVSS 3.7)
• CVE-2026-90454 — Missing authorization in Malcolm (CVSS 4.3)
• CVE-2026-90453 — Open Redirect in Malcolm (CVSS 3.5)
• CVE-2026-90452 — Improper certificate validation in Malcolm (CVSS 5.3)
• CVE-2026-90451 — Use of Default Credentials in Malcolm (CVSS 5.9)
• CVE-2026-90450 — Incorrect Authorization in Malcolm (CVSS 4.3)
• CVE-2026-90449 — Missing Authentication for Critical Function in Malcolm (CVSS 6.5)
• CVE-2026-90448 — Missing Authorization in Malcolm (CVSS 6.5)
• CVE-2026-90447 — Authentication Bypass by Spoofing in Malcolm (CVSS 6.5)
• CVE-2026-90446 — Server-Side Request Forgery in Malcolm (CVSS 4.3)
• CVE-2026-90445 — Path Traversal in Malcolm (CVSS 6.5)
• CVE-2026-90444 — OS Command Injection in Malcolm (CVSS 8.8)
• CVE-2026-90443 — Cross-site Scripting in Malcolm (CVSS 5.4)