CVE record · 2 sources
CVE-2026-90444
CVSS 3.1A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters.
- Vendor
- Microsoft
- CVSS
- 3.1
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CISA Malcolm
The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…
-
A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters.
A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters. An automated process later constructs and runs a system command using the uploaded file's…