CISA Malcolm
Summary
CISA has identified multiple vulnerabilities in CISA Malcolm, specifically affecting versions prior to v26.08.0. These vulnerabilities include authentication bypass, SSRF, and CSRF, which could allow unauthenticated attackers to access sensitive data or execute unauthorized actions. A patch is available in Malcolm Version v26.08.0.
IFF Assessment
The article details multiple critical vulnerabilities in the CISA Malcolm system, posing a significant risk to defenders by enabling unauthorized access and actions.
Severity
Defender Context
Defenders should prioritize patching or updating CISA Malcolm systems to version v26.08.0 or later to mitigate these critical vulnerabilities. Monitoring for indicators of compromise related to authentication bypass, SSRF, and CSRF attacks on Malcolm instances is also recommended.