Skip to content

CVE record · 2 sources

CVE-2026-107361

CVSS 4.2

The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces…

Vendor: F5
Product: NGINX, Open-source SIEM / detection
CVSS: 4.2
EPSS: 0.010 (p62)
Exposure class: Mobile OS, Web platform, Endpoint security

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CISA advisory CISA 16d ago

CISA Malcolm

The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF)…

CVSS 3.1 CVE-2026-107336 CVE-2026-107333 CVE-2026-107362+4 more Apple
14

CVE NVD 23d ago

The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces…

The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0.0). Arkime trusts the X-Forwarded-User header from any IP address…

CVSS 4.2 CVE-2026-107361 F5