CISA Malcolm
CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-107362US | — | — | ||
Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *.php files and Malcolm only ove… | ||||
| CVE-2026-107361US | —OT erhöht | — | ||
The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0.0). Arkime trusts the X-Forwarde… | ||||
| CVE-2026-107337US | — | — | ||
The Malcolm kiosk Flask application exposes a POST /script_call/<script> endpoint with zero authentication and wildcard CORS (CORS(app)). An attacker can force the operator's brows… | ||||
| CVE-2026-107336US | —OT erhöht | — | ||
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segm… | ||||
| CVE-2026-107335US | —OT erhöht | — | ||
Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives (zip/tar/r… | ||||
| CVE-2026-107334US | —OT erhöht | — | ||
Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/e… | ||||
| CVE-2026-107333US | —OT erhöht | — | ||
Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorization layer and nginx's own reque… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICSA Advisory ICSA-26-280-01 JSONself
- ICSA Advisory ICSA-26-280-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (7)
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.08.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.08.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.08.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.08.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.08.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.09.0
- BehobenMalcolm
This vulnerability was patched in Malcolm Version v26.09.0
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan