CVE-2026-77822

creationtimestamp| type| source ---|---|--- 2026-09-05 08:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muqz5zimdj2m...

Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint

Summary IBM ContextForge MCP Gateway contains a server-side request forgery SSRF vulnerability in its Agent-to-Agent A2A invocation endpoint POST /a2a/agentname/invoke. Unlike every other outbound egress path in the gateway, the A2A invocation path does not pin the DNS-resolved IP address at...