criticalVulnerability
CISA Issues Advisory for Seven Vulnerabilities in Malcolm ICS Software
Multiple critical and high-severity flaws affect CISA Malcolm <= v26.07.1, enabling authentication bypass, authorization bypass, and SSRF
Cyber.TechVoid2 min read
Key Takeaways
- Seven CVEs affect CISA Malcolm <= v26.07.1, covering authentication bypass, authorization bypass, SSRF, and CSRF.
- Exploitation could allow unauthenticated access to the Arkime backend and bypass of role-based access controls.
- CVSS scores range from 6.5 to 8.1; all flaws patched in Malcolm v26.08.0.
- Critical Infrastructure sectors Energy, IT, and Water and Wastewater are affected worldwide.
- Organizations should upgrade to Malcolm v26.08.0 immediately and review network-facing proxy configurations.
Related Security News
highMalware
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses VPN Session Checks
A suspected advanced threat actor has been observed exploiting a path traversal vulnerability in Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager to deploy a previously unreported memory-resident ARM64 malware strain known as PEERSTITCH. The flaw (CVSS 5.4) resides in the command line interpreter and allows unauthorized file access, with attackers bypassing security checks on tagged VPN sessions. Patches have been released by Fortinet.
The Hacker News1 min read
