Cisa vulnerabilities
34 CVEs and advisories name Cisa as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-107334Incorrect Authorization in Malcolm
- CVE-2026-107335Improper Handling of Highly Compressed Data in Malcolm
- CVE-2026-107337Cross-Site Request Forgery in Malcolm
- CVE-2026-107361Authentication Bypass Using an Alternate Path or Channel in Malcolm
- CVE-2026-107362Server-Side Request Forgery in Malcolm
- CVE-2026-107333Incorrect Authorization in Malcolm
- CVE-2026-107336Authentication Bypass by Spoofing in Malcolm
- CVE-2026-90457The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, a
- CVE-2026-90456Use of default credentials in Malcolm
- CVE-2026-90455Dependency on vulnerable third-party component in Malcolm
- CVE-2026-90454Missing authorization in Malcolm
- CVE-2026-90453Open Redirect in Malcolm
- CVE-2026-90452Improper certificate validation in Malcolm
- CVE-2026-90451Use of Default Credentials in Malcolm
- CVE-2026-90450Incorrect Authorization in Malcolm
- CVE-2026-90449Missing Authentication for Critical Function in Malcolm
- CVE-2026-90448Missing Authorization in Malcolm
- CVE-2026-90447Authentication Bypass by Spoofing in Malcolm
- CVE-2026-90446Server-Side Request Forgery in Malcolm
- CVE-2026-90445Path Traversal in Malcolm
- CVE-2026-90444OS Command Injection in Malcolm
- CVE-2026-90443Cross-site Scripting in Malcolm
- CVE-2026-43510CISA manage.get.gov insecure portfolio administrative privileges
- CVE-2025-67634Software Acquisition Guide Supplier Response Web Tool XSS
- CVE-2025-35436CISA Thorium account verification email error handling
- CVE-2025-35435CISA Thorium download stream divide by zero
- CVE-2025-35434CISA Thorium does not validate TLS connections to Elasticsearch
- CVE-2025-35433CISA Thorium does not properly invalidate previously used tokens
- CVE-2025-35432CISA Thorium does not rate limit account verification email messages
- CVE-2025-35431CISA Thorium LDAP injection