Malcolm vulnerabilities

2 known vulnerabilities in Malcolm from Cisagov. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Malcolm: Incorrect Authorization

  CVE-2026-63177Aug 11, 2026Cisagov

  Malcolm is a network traffic analysis tool suite. Prior to version 26.07.0, role-based access control enforced in the Nginx OpenResty Lua layer evaluates the raw, unnormalized `ngx.var.request_uri`, while Nginx itself routes requests using the normalized path.

• 8.8 High severity

  Malcolm: Unrestricted Upload of File with Dangerous Type

  CVE-2026-55676Aug 11, 2026Cisagov

  Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at `POST /server/php/submit.php` and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restric