CVE-2026-75011

The flaw resides in the execAsync function of index.js in kylecui's NetForensicMCP 2.1.0; manipulating the interface/protocol argument enables remote command injection. CVSS 6.3 (MEDIUM) reflects network-exploitable low-complexity attack with low privileges. A proof-of-concept exploit has been pu...