2 matches found
CVE-2026-90446 Server-Side Request Forgery in Malcolm
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...
5.3CVSS0.00351EPSS
SaveExploits0References2
CVE-2026-90446 Server-Side Request Forgery in Malcolm
An application programming interface endpoint accepts a user-supplied value and interpolates it directly into the path of a backend request to the underlying search and analytics data store, without restricting its contents. This allows an authenticated attacker to substitute an arbitrary backend...
5.3CVSS6AI score0.00351EPSS
SaveExploits0References2
20