CVE-2026-32582

The WordPress IATO MCP plugin in versions

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

EUVD-2026-92952

Contributor Broken Access Control in IATO MCP = 1.11.0 versions...

CVE-2026-32582 WordPress IATO MCP plugin <= 1.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a through 1.12.0...

CVE-2025-6514

mcp-remote Connect an MCP Client that only supports local stdio servers to a Remote MCP Server, with auth support: Note: this is a working proof-of-concept but should be considered experimental. Why is this necessary? So far, the majority of MCP servers in the wild are installed locally, using th...

PT-2026-106768

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-mcp versions 3.61.0 through 3.87.0 Description An authenticated user can manage MCP API keys outside the intended account, which allows for privilege escalation through account takeover. Recommendations Update...

PT-2026-106327

Name of the Vulnerable Software and Affected Versions WDS MCP Content Manager versions prior to 3.10.5 Description A broken access control issue exists for contributors, allowing unauthorized access or actions within the system. Recommendations Update to a version newer than 3.10.4...

PT-2026-106748

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run shell tool in the CommandLineExecutor component of ufo/client/mcp/local servers/cli mcp server.py validates only the first token of the bash command parameter and permits...

PT-2026-106326

Contributor Broken Access Control in IATO MCP = 1.11.0 versions...

PT-2026-106739

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute command tool in ufo/client/mcp/http servers/linux mcp server.py treats sort and uniq as read-only commands while the free-form command parameter can select their...

PT-2026-106738

Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type text and launch app tools in ufo/client/mcp/http servers/mobile mcp server.py pass the authenticated caller-controlled text and package name parameters into adb shell comma...

PT-2026-106750

Name of the Vulnerable Software and Affected Versions Microsoft UFO versions prior to 3.0.9 Description The press key tool in ufo/client/mcp/http servers/mobile mcp server.py accepts a free-form key code parameter and passes it to adb shell input keyevent. The adb client joins the arguments into ...

CVE-2026-105761

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

EUVD-2026-92852

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-105761

The open-source LLM app development platform Dify contains an Insecure Direct Object Reference (IDOR) vulnerability in versions prior to 1.16.0 . The root cause is located in api/controllers/console/app/mcp_server.py, where the PUT /console/api/apps//server endpoint uses AppMCPServerController.pu...

CVE-2026-105761 Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers

Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/appid/server endpoint in api/controllers/console/app/mcpserver.py used AppMCPServerController.put to retrieve an AppMCPServer by the client-supplied server ID without verifying that the server belonged...

CVE-2026-77262

CVE-2026-77262 — Lecture arbitraire de fichiers dans mcp-atlassian via confluenceuploadattachment Sévérité : Élevée CVSS 8.6 CWE : CWE-22 — Traversée de chemin Version affectée : sooperset/mcp-atlassian 0.22.0 Corrigé dans : 0.22.0 Avis de sécurité : GHSA-p6hp-93wp-fh6p NVD :...

CVE-2026-105699

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project identifier in a project-scoped MCP connection but did not authorize the resource URI supplied to resources/read. readresource forwarded the...

CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...