CISA advisory CISA 30d ago

CISA Malcolm

CVSS 3.1 CVE-2026-90443 CVE-2026-90444 CVE-2026-90445+12 more Microsoft

The following versions of CISA Malcolm are affected: Malcolm CVSS Vendor Equipment Vulnerabilities v3 8.8 CISA CISA Malcolm Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Server-Side Request Forgery (SSRF), Authentication Bypass by Spoofing, Missing Authorization, Missing Authentication for Critical Function, Incorrect Authorization, Use of Default Credentials, Imprope

Read at CISA Cybersecurity Advisories

Vendor: Microsoft
CVSS: 3.1

Why it ranks 16 (Routine)

Covered by 2 independent sources
Government advisory
Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.

Related coverage

Other items that share a CVE or were clustered with this one.

CISA Malcolm

Links

Related coverage

CISA Malcolm

The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the…

An example environment-configuration file for a bundled inventory-management component ships with a fixed, publicly-known administrative password.

A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the…

A deployment mode intended to expose only read access to a bundled packet-analysis component's interface denies a list of write-capable routes by…

A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without…

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the…

An example environment-configuration file ships with a fixed, publicly-known secret value used to sign authentication cookies for a bundled…

The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role…

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly…

A deployment mode intended to expose only read access to stored data proxies a set of application programming interface routes without restricting…

A routing rule selects between two different authentication mechanisms for the same downstream service based on the value of a client-supplied…

An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the…

An interface that accepts file uploads from authenticated users extracts the contents of uploaded archives without validating that extracted file…

A file-transfer interface that requires valid credentials accepts attacker-controlled filenames without restricting shell metacharacters.

A web interface reflects a portion of the request URL into a script context and a hyperlink attribute without adequate encoding, and does not require…

Keyboard