CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication

🗓️ 15 Sep 2026 05:30:16Reported by VulDBType

A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The att...

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-91002	15 Sep 202605:30	–	cve
Cvelist	CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication	15 Sep 202605:30	–	cvelist
EUVD	EUVD-2026-78274	15 Sep 202605:30	–	euvd
NVD	CVE-2026-91002	15 Sep 202606:17	–	nvd
Positive Technologies	PT-2026-91864	15 Sep 202600:00	–	ptsecurity

Source	Link
github	www.github.com/stamparm/maltrail/
vuldb	www.vuldb.com/vuln/403583/cti
github	www.github.com/stamparm/maltrail/commit/d95868dff3da4d3bd4f942837a26cb7c73a797ae
vuldb	www.vuldb.com/submit/931699
github	www.github.com/stamparm/maltrail/releases/tag/3.1
vuldb	www.vuldb.com/cve/CVE-2026-91002
vuldb	www.vuldb.com/vuln/403583
gist	www.gist.github.com/simyat/fd48e9c257ab95405c109aec575977f1

15 Sep 2026 05:30Current

CVSS 25

CVSS 3.15.3

CVSS 35.3

CVSS 46.9

EPSS0.00443

SSVC