[Control Systems] CISA security advisory (AV26-841)

Serial Number: AV26-841
Date: August 21, 2026

As of August 18, 2026, Malcolm is affected by vulnerabilities in the following product:

• Malcolm
  • Prior to 26.06.1 (CVE-2026-55676)
  • Prior to 26.07.0 (CVE-2026-63133, CVE-2026-63134, CVE-2026-63177)
  • Prior to or equal to 26.07.1 (CVE-2026-19670, CVE-2026-19671)

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• CISA Malcolm | CISA
• ICS Advisories | CISA