Skip to content
OpenAdvisories

Vendor

CISA

34 known vulnerabilities.

Products

Malcolm 22 Thorium 7 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for Zeek 3 Software Acquisition Guide Tool 1 manage.get.gov 1 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-90455

    Dependency on vulnerable third-party component in Malcolm

    A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library i…

    CISA Malcolm
  • Low 3.5
    CVE-2026-90453

    Open Redirect in Malcolm

    A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that cause…

    CISA Malcolm