CVE-2026-107362

Vendor

Apple

CVSS

7.1

EPSS

0.010 (p62)

Exposure class

Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF)…

   CVSS 3.1 CVE-2026-107336CVE-2026-107333CVE-2026-107362+4 more Apple
2. 16
   CVE NVD 23d ago

   Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream…

   Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *.php files and Malcolm only overwrites config.php and submit.php. Upstream…

   CVSS 7.1 CVE-2026-107362