CVE-2026-107336

Vendor

F5

Product

NGINX, Open-source SIEM / detection

CVSS

6.5

EPSS

0.010 (p62)

Exposure class

Mobile OS, Web platform, Endpoint security

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF)…

   CVSS 3.1 CVE-2026-107336CVE-2026-107333CVE-2026-107362+4 more Apple
2. 14
   CVE NVD 23d ago

   Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive…

   Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase (for example…

   CVSS 6.5 CVE-2026-107336 F5