CVE-2026-107337 | CISA Malcolm up to 26.07.1 Kiosk control.py cross-site request forgery

October 8, 2026 Yanac

A vulnerability was found in CISA Malcolm up to 26.07.1. It has been classified as problematic. This affects an unknown function of the file control.py of the component Kiosk. The manipulation leads to cross-site request forgery.

This vulnerability is documented as CVE-2026-107337. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More