CVE-2026-107362 | CISA Malcolm up to 26.07.1 file-upload component index.php unrestricted upload

October 8, 2026 Yanac

A vulnerability, which was classified as critical, was found in CISA Malcolm up to 26.07.1. This affects an unknown part of the file index.php of the component file-upload component. The manipulation results in unrestricted upload.

This vulnerability is cataloged as CVE-2026-107362. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More