Vendors and CVEs › CVEs › CVE-2026-107336
CVE-2026-107336: what it is, who is affected and what to do
Six flaws affect Malcolm, including authentication bypass, incorrect authorisation, server-side request forgery (SSRF), cross-site request forgery (CSRF) and data amplification. Rated 8.1 on CVSS v3.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2026-107336 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High
Six flaws found in CISA's Malcolm network analysis software
Six flaws affect Malcolm, including authentication bypass, incorrect authorisation, server-side request forgery (SSRF), cross-site request forgery (CSRF) and data amplification. Rated 8.1 on CVSS v3.