Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-90457

Quick assessment

Affected
CISA Malcolm
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

管理密码在支撑某条认证路径的凭据存储中，使用了一种相对较弱且计算速度较快的哈希算法进行哈希处理，而存储该哈希值的文件，其权限设置允许任何本地用户读取。这与另一条认证路径中针对同一密码使用的、更强的哈希算法不一致。能够读取该文件的主体（包括本地用户或拥有配置备份访问权限的一方），完全有可能通过离线计算还原出原始密码，从而在所有接受该管理凭据的路径中造成凭据泄露。

CVSS 6.9 · Medium EPSS 0.09% · P1

Affected Version Matrix 2

VendorProduct Version RangeStatus
CISA Malcolm < v26.06.0 affected
v26.06.0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-90457

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The administrative password is hashed using a comparatively weak, fast algorithm for the credential store backing one authentication path, and the file containing that hash is written with permissions allowing it to be read by any local user. This is inconsistent with a separate, stronger hashing algorithm used for the same password on another authentication path. A party able to read this file, including a local user or a party with access to a configuration backup, could feasibly recover the underlying password through offline computation, compromising the administrative credential across every path that accepts it.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用具有不充分计算复杂性的口令哈希
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
CISA Malcolm 0 ~ v26.06.0 -

II. Public POCs for CVE-2026-90457

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-90457

请登录查看更多情报信息。

Same Patch Batch · CISA · 2026-09-11 · 15 CVEs total

CVE-2026-90456 9.2 CRITICAL 库存管理组件示例配置硬编码管理密码
CVE-2026-90444 8.7 HIGH 文件传输接口命令注入导致认证用户权限提升
CVE-2026-90451 8.2 HIGH 数据包分析组件硬编码密钥致认证Cookie可伪造
CVE-2026-90448 7.1 HIGH 只读模式未限制写操作，致记录可被覆盖
CVE-2026-90447 7.1 HIGH Apache Shiro 5.3.5 认证路由逻辑漏洞
CVE-2026-90445 7.1 HIGH 文件上传解压时路径遍历导致任意文件写入
CVE-2026-90449 6.9 MEDIUM 某网关特定认证模式下管理接口认证绕过
CVE-2026-90455 6.3 MEDIUM HTTP客户端库回滚致漏洞回归
CVE-2026-90452 6.0 MEDIUM Nginx反向代理至身份提供者证书验证缺失
CVE-2026-90454 5.3 MEDIUM Zeroc-ice读模式漏配允许修改会话标签
CVE-2026-90446 5.3 MEDIUM Elasticsearch 任意路径插值导致凭据泄露
CVE-2026-90450 5.3 MEDIUM 应用角色授权查找默认放行：未注册处理器可被任意用户访问
CVE-2026-90443 5.3 MEDIUM 软件未认证反射型XSS漏洞
CVE-2026-90453 5.1 MEDIUM 文件上传Referer未校验致任意重定向

IV. Related Vulnerabilities

Same product: Malcolm
Same vendor: CISA
Same weakness: CWE-916

V. Comments for CVE-2026-90457

No comments yet

Leave a comment