As cited
Copy frozen at (site build).
vulnerabilities
CISA Malcolm
CISA published a vulnerability advisory for Malcolm, a network traffic analysis platform used in critical infrastructure, disclosing six authentication and authorization bypass vulnerabilities alongside server-side request forgery, cross-site request forgery, and denial of service issues. Affected versions Malcolm <=v26.07.1 contain flaws in nginx proxy configuration, role-based access control, and file upload handling; versions <=v26.08.0 contain additional issues in the Arkime live capture service and file-upload component. Patches are available in Malcolm v26.08.0 through v26.09.0 depending on the vulnerability.
Why it matters: Organizations deploying Malcolm for network forensics in energy, information technology, and water and wastewater systems face immediate risk of unauthenticated access to captured traffic, operator-initiated denial of service, and privilege escalation by low-privilege users; upgrade to patched versions immediately.
- Source published
- First seen by Cybersecurity Tracker