CVE-2026-90456 | Malcolm up to 26.5.x Inventory Management hard-coded credentials

September 11, 2026 Yanac

A vulnerability was found in Malcolm up to 26.5.x. It has been declared as critical. Affected by this issue is some unknown functionality of the component Inventory Management Component. The manipulation results in hard-coded credentials.

This vulnerability is cataloged as CVE-2026-90456. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More