MA
Product
Malcolm
by CISA · last CVE Oct 8, 2026
22
CVEs
0
On KEV
8.8
Max CVSS
7
New 30D
Severity mix
Critical 0High 5Medium 15Low 2
Watch

Add Malcolm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90444
8.8
0%
Sep 11
OS Command Injection in Malcolm
Affected: before v26.06.0
CVE-2026-107333
8.1
1%
Oct 8
Incorrect Authorization in Malcolm
Affected: through 26.07.1
CVE-2026-90456
8.1
0%
Sep 11
Use of default credentials in Malcolm
Affected: before v26.06.0
CVE-2026-107337
7.1
0%
Oct 8
Cross-Site Request Forgery in Malcolm
Affected: through 26.07.1
CVE-2026-107362
7.1
0%
Oct 8
Server-Side Request Forgery in Malcolm
Affected: through 26.07.1
Showing 5