CISA Malcolm

First reported by CISA Cybersecurity Advisories, concerning Malcolm, CVE-2026-107361, CVE-2026-107337.

1 day ago By HelpMeTrack News Desk Tech & AI

Editorial graphic — no licensed photograph was available for this story.

HelpMeTrack began tracking this technology story after CISA Cybersecurity Advisories reported it on 14 Oct 2026, concerning Malcolm, CVE-2026-107361, CVE-2026-107337.

Tracked as 7 CVEs, including CVE-2026-107333, CVE-2026-107334, CVE-2026-107335, the flaw is rated MEDIUM with a CVSS score of 5.4 out of 10, classified as CWE-290 Authentication Bypass by Spoofing.

Key facts

CVE: CVE-2026-107333, CVE-2026-107334, CVE-2026-107335, CVE-2026-107336, CVE-2026-107337, CVE-2026-107361, CVE-2026-107362
Severity: MEDIUM (CVSS 5.4/10)
Vulnerability type: CWE-290 Authentication Bypass by Spoofing

Why we're tracking this

We found 6 related reports from CISA Cybersecurity Advisories covering this development. We've tracked 5 further updates as more reporting came in. We'll keep this page updated as the story develops, with links to the original reporting below.

Development timeline

14 Oct, 19:20 UTC First reported by CISA Cybersecurity Advisories
17 Oct, 07:00 UTC Confirmed again by CISA Cybersecurity Advisories
18 Oct, 01:54 UTC Confirmed again by CISA Cybersecurity Advisories
19 Oct, 01:56 UTC Confirmed again by CISA Cybersecurity Advisories
20 Oct, 03:58 UTC Confirmed again by CISA Cybersecurity Advisories
21 Oct, 07:00 UTC Confirmed again by CISA Cybersecurity Advisories

Original reporting

cisa malcolm — CISA Cybersecurity Advisories