CISAgov vulnerabilities
6 published CVEs name CISAgov among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-19671
Improper handling of highly compressed data (data amplification) in CISA Malcolm
CISAgov · Malcolm
High7.1 - CVE-2026-19670
Incorrect Authorization in CISA Malcolm
CISAgov · Malcolm
Medium5.3 - CVE-2026-63177
Malcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBAC
cisagov · Malcolm
High7.1 - CVE-2026-63134
Malcolm's Path Traversal in Archive Extraction Allows Arbitrary Directory Creation
cisagov · Malcolm
Medium5.3 - CVE-2026-63133
Malcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)
cisagov · Malcolm
High7.1 - CVE-2026-55676
Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component
cisagov · Malcolm
High8.7