← Incidents
INCIDENT 766PhishingLOW / UNDER REVIEWSourced
CISA Malcolm
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-280-01_DrupalCompatible.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p>The following versions of CISA Malcolm are affected:</p> <ul> <li>Malcolm <=v26.07.1 (CVE-2026-107336, CVE-2026-107361, CVE-2026-107337, CVE-2026-107335, CVE-2026-107334)</li> <li>Malcolm <=v26.08.0 (CVE-2026-107333, CVE-2026-107362)</li> </ul> <div class="csaf-table"> <table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap> <thead> <tr> <th role="columnheader" data-tablesaw-priority="pers…
Last evidence update
15 OCT 2026 · 12:00 UTC
Source count
2
Status
reported
United StatesManufacturingEnergyUtilitiesDefenseCVE-2026-90443CVE-2026-90444CVE-2026-90445CVE-2026-90446CVE-2026-90447CVE-2026-90448CVE-2026-90449CVE-2026-90450CVE-2026-90451CVE-2026-90452CVE-2026-90453CVE-2026-90454CVE-2026-90455CVE-2026-90456CVE-2026-90457CVE-2026-107336CVE-2026-107361CVE-2026-107337CVE-2026-107335CVE-2026-107334CVE-2026-107333CVE-2026-107362
Observation history
How this record has evolved as evidence accumulated.
02 OCT · 05:22 UTC
Initial report
16 OCT · 05:00 UTC
Second independent source
16 OCT · 05:00 UTC
Summary updated from new evidence
16 OCT · 05:00 UTC
Related CVE identified (CVE-2026-107362)
Evidence