CVE-2026-90450
Quick assessment
Affected
CISA Malcolm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
当请求处理器的名称未出现在角色需求表中时，应用程序的角色授权查找机制默认授予访问权限，而不是默认拒绝。因此，任何未在该表中显式注册的请求处理器，均可被任何已认证用户访问，而不论其分配的角色如何。此外，任何新添加的处理器在显式加入该表之前，默认处于“失败开放”（fail-open）状态。
Possible ATT&CK Techniques 1 AI
T1079
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-90450
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user regardless of their assigned role, and any newly added handler is fail-open by default until explicitly added to the table.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-90450
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-90450
请登录查看更多情报信息。
Same Patch Batch · CISA · 2026-09-11 · 15 CVEs total
| CVE-2026-90456 | 9.2 CRITICAL | 库存管理组件示例配置硬编码管理密码 |
| CVE-2026-90444 | 8.7 HIGH | 文件传输接口命令注入导致认证用户权限提升 |
| CVE-2026-90451 | 8.2 HIGH | 数据包分析组件硬编码密钥致认证Cookie可伪造 |
| CVE-2026-90448 | 7.1 HIGH | 只读模式未限制写操作，致记录可被覆盖 |
| CVE-2026-90447 | 7.1 HIGH | Apache Shiro 5.3.5 认证路由逻辑漏洞 |
| CVE-2026-90445 | 7.1 HIGH | 文件上传解压时路径遍历导致任意文件写入 |
| CVE-2026-90457 | 6.9 MEDIUM | 本地用户可读的管理密码弱哈希文件权限漏洞 |
| CVE-2026-90449 | 6.9 MEDIUM | 某网关特定认证模式下管理接口认证绕过 |
| CVE-2026-90455 | 6.3 MEDIUM | HTTP客户端库回滚致漏洞回归 |
| CVE-2026-90452 | 6.0 MEDIUM | Nginx反向代理至身份提供者证书验证缺失 |
| CVE-2026-90454 | 5.3 MEDIUM | Zeroc-ice读模式漏配允许修改会话标签 |
| CVE-2026-90446 | 5.3 MEDIUM | Elasticsearch 任意路径插值导致凭据泄露 |
| CVE-2026-90443 | 5.3 MEDIUM | 软件未认证反射型XSS漏洞 |
| CVE-2026-90453 | 5.1 MEDIUM | 文件上传Referer未校验致任意重定向 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-90450
No comments yet