Our takeCISA Malcolm advisory ICSA-26-254-01 lists three CVEs with confirmed exploitation that can lead to XSS, OS command injection, or path traversal. Update to the latest version if you run Malcolm.Cyber Resilience desk
Sources (1)
- cisa_ics · cisa_ics
What this means for you — Security leader:CISA ICSA-26-254-01 lists three high-severity flaws in Malcolm (XSS, OS command injection, path traversal) with confirmed exploitation. Update to 26.07.2 or later and review for compromise.
What this means for you — Lean IT orgs:If you run CISA Malcolm for network monitoring, update it to version 26.07.2 or newer right away. Most teams in your position can do this through the built-in update tool or by redeploying the latest container image.
What this means for you — MSP:CISA Malcolm instances you manage for clients are affected by confirmed-exploited XSS, command injection, and path-traversal flaws. Patch every deployment to 26.07.2 and scan for signs of prior compromise.
What this means for you — Researcher:CISA Malcolm advisory ICSA-26-254-01 lists three CVEs with confirmed exploitation that can lead to arbitrary code execution or DoS. Update to 26.07.2 or later if you run Malcolm.