Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/17 6:16 p.m.•20 views

CVE-2026-54446

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS0.00619EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/17 5:13 p.m.•16 views

EUVD-2026-82336

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS6.1AI score0.00619EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 5:13 p.m.•73 views

CVE-2026-54446

netlicensing-mcp (Labs64) is a natural-language MCP server for the NetLicensing licensing API. Prior to 0.1.6 , the ApiKeyMiddleware in server.py fails to reject requests that carry no client API key; the downstream client then falls back to the operator's NETLICENSING_API_KEY environment variabl...

8.1CVSS6.1AI score0.00619EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/17 5:13 p.m.•15 views

CVE-2026-54446 NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS6.1AI score0.00619EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/17 5:13 p.m.•44 views

CVE-2026-54446 NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS0.00619EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/17 5:13 p.m.•9 views

CVE-2026-54446 NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS6AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-54446: Missing Authentication for Critical Function

NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.6, network-reachable HTTP transport requests to /mcp that omit x-netlicensing-api-key, Authorization: Bearer, and the apikey...

8.1CVSS6.1AI score0.00619EPSS
SaveExploits0References2
Rows per page
Query Builder