https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:59:37 +0000 https://cve.radiocsirt.org/vuln/cve-2026-90452 <p><strong>Affected:</strong> CISA Malcolm</p> <p>Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider&#39;s server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the identity provider and issue forged authentication tokens accepted by the deployment.</p> <p><strong>Affected:</strong> CISA Malcolm</p> <p>Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider&#39;s server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the identity provider and issue forged authentication tokens accepted by the deployment.</p> https://cve.radiocsirt.org/vuln/cve-2026-90452