CVE-2026-90443

Vendor

Microsoft

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 16
   CISA advisory CISA 30d ago

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…

   CVSS 3.1 CVE-2026-90443CVE-2026-90444CVE-2026-90445+12 more Microsoft
2. 0
   CVE NVD 11 Sep 2026

   A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require…

   A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require authentication to reach. This allows an unauthenticated network attacker to…

   CVE-2026-90443