VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE EPSS 0.01 (nejvyšší)

CISA Malcolm

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.1, CVEs: CVE-2026-107336, CVE-2026-107333, CVE-2026-107362, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334, Summary: Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alternate Path or Channel, Cross-Site Request Forgery (CSRF), Improper Handling of Highly Compressed Data (Data Amplification)

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první · zachyceno CZ · EN/orig

CISA energetika vodárenství FI US

tg: zranitelnost tp: identita

CVE v události 7

CVEhodnoceníKEVEPSS
CVE-2026-107333 8.1 3.1 · icscert – 0.01
CVE-2026-107334 5.4 3.1 · icscert – 0.00
CVE-2026-107335 6.5 3.1 · icscert – 0.00
CVE-2026-107336 6.5 3.1 · icscert – 0.00
CVE-2026-107337 7.1 3.1 · icscert – 0.00
CVE-2026-107361 4.2 3.1 · icscert – 0.00
CVE-2026-107362 7.1 3.1 · icscert – 0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.1.

Jak se o tom psalo 2

  1. · zachyceno · NCSC-FI FI nadpis události

    CISA Malcolm

    Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.1, CVEs: CVE-2026-107336, CVE-2026-107333, CVE-2026-107362, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334, Summary: Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alternate Path or Channel, Cross-Site Request Forgery (CSRF), Improper Handling of Highly Compressed Data (Data Amplification)

  2. · zachyceno · CISA Advisories US

    CISA Malcolm

    View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334) Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362) CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Alternate Path or Channel, Cross-Site Request Forgery (CSRF), Improper Handling of…