CVE-2026-66416

creationtimestamp| type| source ---|---|--- 2026-07-30 20:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrva5hbcwn2c 2026-08-01 20:04:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bbchgx22f 2026-08-11 19:45:06+00:00| seen|...

Security Bulletin: Vulnerability in MCP Python SDK bundled with IBM Fusion, IBM Fusion HCI and Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI and Content-Aware Storage includes MCP Python SDK. Following vulnerability could allow an attacker to invoke tools or access resources exposed by the MCP server on behalf of the user in those limited circumstances. CVE-2025-66416. Vulnerability Details...

CVE-2025-66416

creationtimestamp| type| source ---|---|--- 2025-12-27 04:21:10+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mawxfiwavy2f 2026-05-05 01:21:55+00:00| seen| https://gist.github.com/limcheekin/49ca8210543fa6a982930a55e27a261c...

GHSA-RCFX-77HG-W2WV FastMCP updated to MCP 1.23+ due to CVE-2025-66416

There was a recent CVE report on MCP: https://nvd.nist.gov/vuln/detail/CVE-2025-66416. FastMCP does not use any of the affected components of the MCP SDK directly. However, FastMCP versions prior to 2.14.0 did allow MCP SDK versions 1.23 that were vulnerable to CVE-2025-66416. Users should upgrad...

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

There was a recent CVE report on MCP: https://nvd.nist.gov/vuln/detail/CVE-2025-66416. FastMCP does not use any of the affected components of the MCP SDK directly. However, FastMCP versions prior to 2.14.0 did allow MCP SDK versions 1.23 that were vulnerable to CVE-2025-66416. Users should upgrad...

CVE-2025-66416 vulnerabilities

Vulnerabilities for packages: semgrep, open-webui...

CVE-2025-66416 vulnerabilities

Vulnerabilities for packages: open-webui, semgrep...

ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66416)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...