Vulners
Lucene search
CVE-2026-39885 FrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | CVE-2026-39885 | 8 Apr 202602:35 | โ | circl |
 | frontmcp ไปฃ็ ้ฎ้ขๆผๆด | 8 Apr 202600:00 | โ | cnnvd |
 | CVE-2026-39885 | 8 Apr 202620:34 | โ | cve |
 | EUVD-2026-20632 | 8 Apr 202619:22 | โ | euvd |
 | mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications | 8 Apr 202619:22 | โ | github |
 | CVE-2026-39885 | 8 Apr 202621:17 | โ | nvd |
 | GHSA-V6PH-XCQ9-QXXJ mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications | 8 Apr 202619:22 | โ | osv |
 | PT-2026-31451 | 8 Apr 202600:00 | โ | ptsecurity |
 | CVE-2026-39885 | 5 Jun 202619:12 | โ | redhatcve |
 | Server-side Request Forgery (SSRF) | 8 Apr 202622:12 | โ | snyk |
10
[
{
"vendor": "agentfront",
"product": "frontmcp",
"versions": [
{
"version": "< 1.0.4",
"status": "affected"
}
]
},
{
"vendor": "@frontmcp",
"product": "adapters",
"versions": [
{
"version": "< 1.0.4",
"status": "affected"
}
]
},
{
"vendor": "@frontmcp",
"product": "sdk",
"versions": [
{
"version": "< 1.0.4",
"status": "affected"
}
]
},
{
"vendor": "frontmcp",
"product": "mcp-from-openapi",
"versions": [
{
"version": "< 2.3.0",
"status": "affected"
}
]
}
]Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
08 Apr 2026 20:34Current
CVSS 3.17.5
EPSS0.00313