CI
Vendor
CISA
35
CVEs
0
On KEV
7
New 30D
Products
MA8.8
Malcolm
CISA
22 CVEs0 on KEV7 new
TH9.8
Thorium
CISA
7 CVEs0 on KEV0 new
IC9.8
Icsnpp-ethercat
Cisa
3 CVEs0 on KEV0 new
MA5.9
manage.get.gov
CISA
1 CVEs0 on KEV0 new
SA6.1
Software Acquisition Guide
Cisa
1 CVEs0 on KEV0 new
SA6.1
Software Acquisition Guide Tool
CISA
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107334 | MA Malcolm CISA | 5.4 | Oct 8 | Incorrect Authorization in Malcolm |
| CVE-2026-107335 | MA Malcolm CISA | 6.5 | Oct 8 | Improper Handling of Highly Compressed Data in Malcolm |
| CVE-2026-107337 | MA Malcolm CISA | 7.1 | Oct 8 | Cross-Site Request Forgery in Malcolm |
| CVE-2026-107361 | MA Malcolm CISA | 4.2 | Oct 8 | Authentication Bypass Using an Alternate Path or Channel in Malcolm |
| CVE-2026-107362 | MA Malcolm CISA | 7.1 | Oct 8 | Server-Side Request Forgery in Malcolm |
| CVE-2026-107333 | MA Malcolm CISA | 8.1 | Oct 8 | Incorrect Authorization in Malcolm |
| CVE-2026-107336 | MA Malcolm CISA | 6.5 | Oct 8 | Authentication Bypass by Spoofing in Malcolm |
| CVE-2026-90457 | MA Malcolm CISA | 6.2 | Sep 11 | The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is… |
| CVE-2026-90456 | MA Malcolm CISA | 8.1 | Sep 11 | Use of default credentials in Malcolm |
| CVE-2026-90455 | MA Malcolm CISA | 3.7 | Sep 11 | Dependency on vulnerable third-party component in Malcolm |
| CVE-2026-90454 | MA Malcolm CISA | 4.3 | Sep 11 | Missing authorization in Malcolm |
| CVE-2026-90453 | MA Malcolm CISA | 3.5 | Sep 11 | Open Redirect in Malcolm |
| CVE-2026-90452 | MA Malcolm CISA | 5.3 | Sep 11 | Improper certificate validation in Malcolm |
| CVE-2026-90451 | MA Malcolm CISA | 5.9 | Sep 11 | Use of Default Credentials in Malcolm |
| CVE-2026-90450 | MA Malcolm CISA | 4.3 | Sep 11 | Incorrect Authorization in Malcolm |
| CVE-2026-90449 | MA Malcolm CISA | 6.5 | Sep 11 | Missing Authentication for Critical Function in Malcolm |
| CVE-2026-90448 | MA Malcolm CISA | 6.5 | Sep 11 | Missing Authorization in Malcolm |
| CVE-2026-90447 | MA Malcolm CISA | 6.5 | Sep 11 | Authentication Bypass by Spoofing in Malcolm |
| CVE-2026-90446 | MA Malcolm CISA | 4.3 | Sep 11 | Server-Side Request Forgery in Malcolm |
| CVE-2026-90445 | MA Malcolm CISA | 6.5 | Sep 11 | Path Traversal in Malcolm |
| CVE-2026-90444 | MA Malcolm CISA | 8.8 | Sep 11 | OS Command Injection in Malcolm |
| CVE-2026-90443 | MA Malcolm CISA | 5.4 | Sep 11 | Cross-site Scripting in Malcolm |
| CVE-2026-43510 | MA manage.get.gov CISA | 5.9 | May 7 | CISA manage.get.gov insecure portfolio administrative privileges |
| CVE-2025-67634 | SA Software Acquisition Guide Tool CISA | 6.1 | Dec 12 | Software Acquisition Guide Supplier Response Web Tool XSS |
| CVE-2025-35436 | TH Thorium CISA | 7.5 | Sep 17 | CISA Thorium account verification email error handling |
| CVE-2025-35435 | TH Thorium CISA | 4.3 | Sep 17 | CISA Thorium download stream divide by zero |
| CVE-2025-35434 | TH Thorium CISA | 9.8 | Sep 17 | CISA Thorium does not validate TLS connections to Elasticsearch |
| CVE-2025-35433 | TH Thorium CISA | 8.8 | Sep 17 | CISA Thorium does not properly invalidate previously used tokens |
| CVE-2025-35432 | TH Thorium CISA | 7.5 | Sep 17 | CISA Thorium does not rate limit account verification email messages |
| CVE-2025-35431 | TH Thorium CISA | 5.4 | Sep 17 | CISA Thorium LDAP injection |
| CVE-2025-35430 | TH Thorium CISA | 6.5 | Sep 17 | CISA Thorium insecure downloaded file path validation |
| CVE-2023-7244 | IC Icsnpp-ethercat Cisa | 9.8 | Mar 1 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write in their primary analyses… |
| CVE-2023-7243 | IC Icsnpp-ethercat Cisa | 9.8 | Mar 1 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds write while analyzing specific… |
| CVE-2023-7242 | IC Icsnpp-ethercat Cisa | 8.2 | Mar 1 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read during the process of… |