CVE-2026-90445

Vendor

Microsoft

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 16
   CISA advisory CISA 30d ago

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…

   CVSS 3.1 CVE-2026-90443CVE-2026-90444CVE-2026-90445+12 more Microsoft
2. 0
   CVE NVD 11 Sep 2026

   An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file…

   An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file paths remain within the intended destination directory. This allows an…

   CVE-2026-90445