CISA Malcolm

View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an…

Summary from CISA Advisories.

Vulnerabilities in this story

Severity and exploitation facts from NVD, FIRST, and CISA.

• CVE-2026-107333High 8.1EPSS 1.0%
• CVE-2026-107337High 7.1EPSS 0.1%
• CVE-2026-107362High 7.1EPSS 0.3%
• CVE-2026-107335Medium 6.5EPSS 0.5%
• CVE-2026-107336Medium 6.5EPSS 0.2%
• CVE-2026-107334Medium 5.4EPSS 0.2%
• CVE-2026-107361Medium 4.2EPSS 0.2%

More in Vulnerabilities

CISA Orders Federal Agencies to Patch Exploited Plex2Shell, Siemens, and SiteGuard Flaws

The Hacker News1h agoVulnerabilitiesCVE-2026-96652

PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP Flaws

SecurityWeek2h agoVulnerabilitiesCVE-2026-109618CVE-2026-109619

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

The Hacker News4h agoAppSecVulnerabilities

Risky Business #856 -- 8-bit encryption, PHP megabugs and more

Podcast1 h 5 minRisky Business4h agoThreat IntelVulnerabilitiesAI

Urgent Livestream - PHP Vulnerabilities: What You Need to Know Today and Do Right Now

VideoSANS Institute7h agoVulnerabilities