Vulnerabilities in CISAgov
6 resultsCVE-2026-55676HIGHMalcolm vulnerable to RCE via unrestricted .php upload to the file-upload componentEPSS 0.6%CVE-2026-63133HIGHMalcolm has Uncontrolled Resource Consumption in Archive Extraction (Inode-Exhaustion DoS)EPSS 0.5%CVE-2026-19671HIGHImproper handling of highly compressed data (data amplification) in CISA MalcolmEPSS 0.4%CVE-2026-63134MEDIUMMalcolm's Path Traversal in Archive Extraction Allows Arbitrary Directory CreationEPSS 0.4%CVE-2026-63177HIGHMalcolm Vulnerable to Authorization Bypass via URI Normalization Differential in Nginx Lua RBACEPSS 0.4%CVE-2026-19670MEDIUMIncorrect Authorization in CISA MalcolmEPSS 0.2%