Vulnerabilidades en CISA
34 resultadosCVE-2026-107334MEDIUMIncorrect Authorization in MalcolmEPSS 0.2%CVE-2025-35434LOWCISA Thorium does not validate TLS connections to ElasticsearchEPSS 0.2%CVE-2026-90449MEDIUMMissing Authentication for Critical Function in MalcolmEPSS 0.2%CVE-2026-90455MEDIUMDependency on vulnerable third-party component in MalcolmEPSS 0.2%CVE-2025-67634MEDIUMSoftware Acquisition Guide Supplier Response Web Tool XSSEPSS 0.2%CVE-2026-90448HIGHMissing Authorization in MalcolmEPSS 0.2%CVE-2026-90450MEDIUMIncorrect Authorization in MalcolmEPSS 0.2%CVE-2026-90443MEDIUMCross-site Scripting in MalcolmEPSS 0.2%CVE-2026-90446MEDIUMServer-Side Request Forgery in MalcolmEPSS 0.2%CVE-2026-90454MEDIUMMissing authorization in MalcolmEPSS 0.2%CVE-2026-90453MEDIUMOpen Redirect in MalcolmEPSS 0.2%CVE-2026-107337HIGHCross-Site Request Forgery in MalcolmEPSS 0.1%CVE-2026-90452MEDIUMImproper certificate validation in MalcolmEPSS 0.1%CVE-2026-90457MEDIUMThe administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, aEPSS 0.1%