stamparm vulnerabilities

Products

• maltrail 2

Latest stamparm CVEs

Newest publication first

1. CVE-2026-91002 stamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication

   Published 2026-09-15

   Medium·CVSS 6.9 EPSS 0.77%

   A weakness has been identified in stamparm maltrail up to 3.0.1. This vulnerability affects the function _blacklist of the file core/httpd.py of the component Blacklist Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched remotely. The...

2. CVE-2025-34073 stamparm/maltrail <=0.54 Remote Command Execution

   Published 2025-07-02

   Critical·CVSS 10.0 EPSS 5.5% Framework module

   An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.