CVE-2026-107333

Vendor

F5

Product

NGINX

CVSS

8.1

EPSS

0.010 (p62)

Exposure class

Mobile OS, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF)…

   CVSS 3.1 CVE-2026-107336CVE-2026-107333CVE-2026-107362+4 more Apple
2. 21
   CVE NVD 23d ago

   Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC)…

   Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorization layer and nginx's own request routing logic. An authenticated user can craft…

   CVSS 8.1 CVE-2026-107333 F5