CVE-2026-107333 | CISA Malcolm up to 26.07.1 URL Path Normalization access control

October 8, 2026 Yanac

A vulnerability has been found in CISA Malcolm up to 26.07.1 and classified as critical. This vulnerability affects unknown code of the component URL Path Normalization. This manipulation causes improper access controls.

This vulnerability is registered as CVE-2026-107333. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More