Skip to content

CVE record · 2 sources

CVE-2026-107334

CVSS 5.4

Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin…

Vendor: F5
Product: NGINX, IT asset management, Open-source SIEM / detection
CVSS: 5.4
EPSS: 0.010 (p62)
Exposure class: Mobile OS, Web platform, Network management, Endpoint security

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CISA advisory CISA 16d ago

CISA Malcolm

The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF)…

CVSS 3.1 CVE-2026-107336 CVE-2026-107333 CVE-2026-107362+4 more Apple
14

CVE NVD 23d ago

Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin…

Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/esadmin, NetBox, upload endpoints) by…

CVSS 5.4 CVE-2026-107334 F5