CISA Malcolm Vulnerabilities: CVE-2026-55676, CVE-2026-63133, CVE-2026-63134, CVE-2026-63177, CVE-2026-19670, CVE-2026-19671

Category: cves 2026-08-18 12:00

Executive Summary

Multiple CVEs affect CISA Malcolm versions <26.07.0, enabling denial‑of‑service, path traversal, and arbitrary code execution via unbounded archive extraction and insecure path handling. Vendor released version 26.07.0 to mitigate. Vulnerabilities include CVE‑2026‑55676, CVE‑2026‑63133, CVE‑2026‑63134, CVE‑2026‑63177, CVE‑2026‑19670, CVE‑2026‑19671.

Intelligence Metadata - Source Publisher: CISA Cyber Advisories - Published Date: 2026-08-18T12:00:00+00:00 - Category: cves

"Most folks are about as happy as they make up their minds to be."

— Abraham Lincoln
Source: CISA Cyber Advisories