CVE-2026-90446 | CISA Malcolm up to 26.5.x API Endpoint path traversal

September 11, 2026 Yanac

A vulnerability identified as problematic has been detected in CISA Malcolm up to 26.5.x. This issue affects some unknown processing of the component API Endpoint. Performing a manipulation results in path traversal.

This vulnerability is reported as CVE-2026-90446. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More