CVE-2026-90453

Vendor

Microsoft

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 16
   CISA advisory CISA 1 Oct 2026

   CISA Malcolm

   The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper…

   CVSS 3.1 CVE-2026-90443CVE-2026-90444CVE-2026-90445+12 more Microsoft
2. 0
   CVE NVD 11 Sep 2026

   A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without…

   A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker…

   CVE-2026-90453