CVE-2026-90453
5.1
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Summary
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be redirected to an arbitrary external destination after completing an upload.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CISA | Malcolm | 0 < v26.06.0 | affected |
| CISA | Malcolm | v26.06.0 | unaffected |
Weaknesses
- CWE-601: CWE-601 URL redirection to untrusted site ('open redirect')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-254-01.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-254-01
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.