Our takeCISA Malcolm advisory ICSA-26-280-01 lists five CVEs with confirmed exploitation that can lead to arbitrary code execution or DoS. Update to 26.07.2 or later if you run Malcolm.Security Resilience desk
Sources (3)
- cisa_advisories · cisa_advisories
- cisa_ics · cisa_ics
- auscert_bulletins · auscert_bulletins
What this means for you — Security leader:CISA ICSA-26-280-01 lists five CVEs (max CVSS 8.1) in Malcolm ≤v26.07.1 and ≤v26.08.0, including authentication bypass by spoofing. Update to 26.07.2 or later immediately if you run Malcolm.
What this means for you — Lean IT orgs:If you run CISA Malcolm for network monitoring, update it to 26.07.2 or later right now. Most teams in your position can do this with the built-in update tool or by downloading the new version from the official site.
What this means for you — MSP:Audit every client running CISA Malcolm. Update all instances ≤v26.07.1 and ≤v26.08.0 to 26.07.2 or later; the advisories list five CVEs including authentication bypass.
What this means for you — Researcher:CISA Malcolm advisory ICSA-26-280-01 lists five CVEs with confirmed exploitation that can lead to arbitrary code execution or DoS. Update to 26.07.2 or later if you run Malcolm.